Behavioral task
behavioral1
Sample
TrvDx3C.exe
Resource
win7-20240708-en
General
-
Target
TrvDx3C.exe
-
Size
21KB
-
MD5
eab8bec0528f55431ffb9c7a51bff3af
-
SHA1
992f32955df979ac5f71aab2e0ed6504fab22000
-
SHA256
ecafc8f769c2841d56bad69893ddba6757dd6abe1e55d30177c69ad6f64b92c8
-
SHA512
fd72dd01785b1102b086a36daf186b14af621eaaeded68602f32b26cd8239af66298a4dfc327f9ffb2cb358ace9b4fa8e32c1994bd63a9f0b3345741347146a1
-
SSDEEP
384:alE2HN5TH332CUO+BX+Qt5j5eiR1lbCFwFvyIA4/UkKCCoVWiaNJawcudoD7Ui:alEm/HH2K+RpZR1M4/UkK0VWDnbcuyDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TrvDx3C.exe
Files
-
TrvDx3C.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE