Behavioral task
behavioral1
Sample
3fb617ea3c11aa78b883ce0b13226440N.exe
Resource
win7-20240704-en
General
-
Target
3fb617ea3c11aa78b883ce0b13226440N.exe
-
Size
130KB
-
MD5
3fb617ea3c11aa78b883ce0b13226440
-
SHA1
dd94af765f528dd9a1eb7ae1f774db2292f80f3e
-
SHA256
01e833439c5bcead35f55e9f7ceeb19a8c002b1131df913cbd7625d390513433
-
SHA512
d745da432136f39e263a65a84f81dcd093c7b73310d2a34407835117f70e3b886f5f7a7e849d5679b3c3571246656cb19e7a63234375f04a0cfab08ae5ae61b0
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Hgll62XgiJehh1hCghdj:V7Zf/FAxTWoJJ7TmljFEwOxW3o/v7V+i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb617ea3c11aa78b883ce0b13226440N.exe
Files
-
3fb617ea3c11aa78b883ce0b13226440N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE