Behavioral task
behavioral1
Sample
3e4cffb4ae17e44d801c62562b3e8026b84e5ee61fd18d35082f096cc3eb53e8N.exe
Resource
win7-20240903-en
General
-
Target
3e4cffb4ae17e44d801c62562b3e8026b84e5ee61fd18d35082f096cc3eb53e8N
-
Size
2.1MB
-
MD5
48b4cfb5f9d21054809810c4fd193020
-
SHA1
90a44907b94ae4158495f98bce71c2f7389005a5
-
SHA256
3e4cffb4ae17e44d801c62562b3e8026b84e5ee61fd18d35082f096cc3eb53e8
-
SHA512
9a722957b6d6e2d9b240a23d62a58117a26cd5e728565291b1d4da2de424033c5669459a8c362f7598f44da1220dd8ecce339941c855658c138fb55cc7e9a725
-
SSDEEP
49152:BaYYaektIIVze6ge/16Yh8j/xtxcWdmKzPrX0/88KhpfyBzYOTuU:BaYYaeY+dM6YydmOQ1zYuuU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e4cffb4ae17e44d801c62562b3e8026b84e5ee61fd18d35082f096cc3eb53e8N
Files
-
3e4cffb4ae17e44d801c62562b3e8026b84e5ee61fd18d35082f096cc3eb53e8N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE