Behavioral task
behavioral1
Sample
3438bc9c3c46efcd7109aefa8d2902a0N.exe
Resource
win7-20240705-en
General
-
Target
3438bc9c3c46efcd7109aefa8d2902a0N.exe
-
Size
1.6MB
-
MD5
3438bc9c3c46efcd7109aefa8d2902a0
-
SHA1
3d731f6e4b90fc16a6ddbed663ef745fc8aaa2b7
-
SHA256
24bf5c1421ec951d207fe3463f374336f7195a3379b3421fb79f62013b191e34
-
SHA512
7df4cd0da80d0c26362fb80096a2ae322add8749a419f5a842a0ae30317da230df271b314e30c826e8492ee036950f5f148dd69191332bcd3c235136bf177f4d
-
SSDEEP
49152:di72J44Po4+N9MkQcakLz0krSXrVCj8vJhFQacakLz0O:dq2J4q/+N9NQcakckrSXoqhFQacakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3438bc9c3c46efcd7109aefa8d2902a0N.exe
Files
-
3438bc9c3c46efcd7109aefa8d2902a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE