Behavioral task
behavioral1
Sample
3b5cbecc74873790417aa6b9d04ca7a0N.exe
Resource
win7-20240705-en
General
-
Target
3b5cbecc74873790417aa6b9d04ca7a0N.exe
-
Size
122KB
-
MD5
3b5cbecc74873790417aa6b9d04ca7a0
-
SHA1
daf15b0dd9a5b86e25c888dc0bfff14ee2df02b9
-
SHA256
e81b8c878eb7f88b5b463209f0ac4a384afd4f59403a70af08c0cdd4e9c33ec0
-
SHA512
0603c1ec04830c3267508f7a2ea6e05a3f0f600303b66988efc47ebef1bc8c83344b2f50ba5b5f35a2bdca60846db0f7befde7fb708cbe30d69f37b5964bf7da
-
SSDEEP
1536:V7Zf/FAxTWQQuEhNwNFkNXNFpiFu9Fy2XNgNFVNVNFomFaMFR01g4:fny3W+0JO2XKFbd0v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5cbecc74873790417aa6b9d04ca7a0N.exe
Files
-
3b5cbecc74873790417aa6b9d04ca7a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE