Behavioral task
behavioral1
Sample
3baf9881ba5f4107e852a4ce9cba177643cba04a3452e1e99914db2429edafb0N.exe
Resource
win7-20240903-en
General
-
Target
3baf9881ba5f4107e852a4ce9cba177643cba04a3452e1e99914db2429edafb0N
-
Size
6.0MB
-
MD5
365c3ec88928e2bd84b17069fc0044e0
-
SHA1
f8ee60bbc2fba2d9eb8f654d1f19b79e8c5cd561
-
SHA256
3baf9881ba5f4107e852a4ce9cba177643cba04a3452e1e99914db2429edafb0
-
SHA512
d8dc6eb81c6bf768588e424e0ec353e2040342a964ffeae8dbb5a3a6c77c370c1cad5a48ab7763ab4c2a23be6864622f7257f89fb7b42c0cee2169b50966d016
-
SSDEEP
196608:Zcccccccccccccccccccccccccccccccccccc0:ZccccccccccccccccccccccccccccccE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3baf9881ba5f4107e852a4ce9cba177643cba04a3452e1e99914db2429edafb0N
Files
-
3baf9881ba5f4107e852a4ce9cba177643cba04a3452e1e99914db2429edafb0N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE