Behavioral task
behavioral1
Sample
3ddcdc57eb14722039af0e476278ab10N.exe
Resource
win7-20240704-en
General
-
Target
3ddcdc57eb14722039af0e476278ab10N.exe
-
Size
459KB
-
MD5
3ddcdc57eb14722039af0e476278ab10
-
SHA1
805e6b766d43f7523e91080c46477acbfec91ecd
-
SHA256
9df42682804bc087cead12c0f2e0ce2399f86f2aacad9ba63be9c601f69d6d14
-
SHA512
241f6fdc2d496be09a93ebea3c6abd4a0b1c0e95c8816c8fad796b4f48d1af1500c106d3c1b1073d2e53681b78053a5c5624f329de28973606294aa667b8a23e
-
SSDEEP
6144:puS87EOB736gUsAObu/WwbOfp2a2mQCUhsd6lLoAaNvGv7d4SnOmcOLJcIn5:puS8wA7KJfWeOximTU6oGo7dBOTOLJcM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ddcdc57eb14722039af0e476278ab10N.exe
Files
-
3ddcdc57eb14722039af0e476278ab10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE