Behavioral task
behavioral1
Sample
3c0c98e60d66b334a5f5b81ca11d2120N.exe
Resource
win7-20240708-en
General
-
Target
3c0c98e60d66b334a5f5b81ca11d2120N.exe
-
Size
161KB
-
MD5
3c0c98e60d66b334a5f5b81ca11d2120
-
SHA1
c5e59a763b978f1722fe2b1cb31c30c0cc68b40c
-
SHA256
0c2ebf481ffd0ac85e8481679133ddc3917bef1b695138b771f4c30ecfa4b973
-
SHA512
b4defb09158547ed7af17b79cfcf97696c9c5c63804a28bdb91031ea73411329706a9d8881392f59c2b65a8ebb2f002670ab1b353ad5b468cf839a20b8b90b9f
-
SSDEEP
1536:V7Zf/FAxTWOOsIZfzc3/Q8zxQiKJAWJAATmXadjUSbcDemTPAZk+cLtdNlb9PfEc:fnyjQSob6W2QZwKS7z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c0c98e60d66b334a5f5b81ca11d2120N.exe
Files
-
3c0c98e60d66b334a5f5b81ca11d2120N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE