Behavioral task
behavioral1
Sample
3e6d332fa5f43e53c6be6ab2d47b28a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e6d332fa5f43e53c6be6ab2d47b28a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
3e6d332fa5f43e53c6be6ab2d47b28a0N.exe
-
Size
80KB
-
MD5
3e6d332fa5f43e53c6be6ab2d47b28a0
-
SHA1
da67cce80aac5dff4adb7536ef1c41530783e72e
-
SHA256
6003f1e842328abbe7df2c3ee7a10938df6b27197eca99c7a2fcf75839984ec0
-
SHA512
0ac6a12871942a81a844550a32e5797625b6f62d43cbdfd8244178f7f4c8fbaafae88efe15952525ef8b6ea38fe79f322a991dbb3a1f2866fa316b00c12f494f
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9SBo7BoVoDv2pIJ0NBG36:V7Zf/FAxTWoJJ7T8oDv2CCBPb23Yfn/L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6d332fa5f43e53c6be6ab2d47b28a0N.exe
Files
-
3e6d332fa5f43e53c6be6ab2d47b28a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE