Behavioral task
behavioral1
Sample
3525c924b788bc39c90fb59c4e1491baef2ee28f5f306637f455bd44f35e0bd7.exe
Resource
win7-20240903-en
General
-
Target
3525c924b788bc39c90fb59c4e1491baef2ee28f5f306637f455bd44f35e0bd7
-
Size
221KB
-
MD5
4f107f0188da0acac26a0222dc61cef6
-
SHA1
3796b249c2a0c8cd60201e6a011d45a25eaffc04
-
SHA256
3525c924b788bc39c90fb59c4e1491baef2ee28f5f306637f455bd44f35e0bd7
-
SHA512
8955ad56486d89159f2517fbebdc51aac4017a74351fe3973f0c133cc03fb077867a170df51feb699842281ee45ac9865dc740263d2fd40fc39475f165cec013
-
SSDEEP
6144:KiQSox5jj6D1HUDIwPNqAsFTAAAAGAAAADAAAABSAAAAUUwTw:VQtnj6DxyIQhsJwTw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3525c924b788bc39c90fb59c4e1491baef2ee28f5f306637f455bd44f35e0bd7
Files
-
3525c924b788bc39c90fb59c4e1491baef2ee28f5f306637f455bd44f35e0bd7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE