Behavioral task
behavioral1
Sample
3936910f63118609fee7db4554ddd620N.exe
Resource
win7-20240729-en
General
-
Target
3936910f63118609fee7db4554ddd620N.exe
-
Size
379KB
-
MD5
3936910f63118609fee7db4554ddd620
-
SHA1
b8a946ae9b6663b1d90263d622de2a6fc72a5ac3
-
SHA256
cf2a167e34b8037c2f705f0d67f2839f8178950a4164093bcf03258ffdaa1aba
-
SHA512
ba8210419a13aa1c00430a7ae11a75f6ec81c397696cb69d40b25ae16cb16753d7c0cb72e98810cab9303d41ec9e57d7a2c5e922772ca2c95300c7280de126d2
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXRA:Xqnum1F6/789ujYTyLylze70wi3BEmI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3936910f63118609fee7db4554ddd620N.exe
Files
-
3936910f63118609fee7db4554ddd620N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE