Behavioral task
behavioral1
Sample
3e51c51539ec7154f64fe545b1896bac797661c075bf420e129601ad22da2500.exe
Resource
win7-20241010-en
General
-
Target
3e51c51539ec7154f64fe545b1896bac797661c075bf420e129601ad22da2500
-
Size
422KB
-
MD5
487039da14c7e8d77e8ae60f529bd256
-
SHA1
eed5de3fbad4de586bd9dd707950f01d300aec0e
-
SHA256
3e51c51539ec7154f64fe545b1896bac797661c075bf420e129601ad22da2500
-
SHA512
5f72c6680f4c895d3c2eb001e89296982e9ec18f5e187eadb060cb6a89d39868342f3a9d4037b53cf50db66a670867830b8f0f3dd9001ca9fddd4b8c5697bd67
-
SSDEEP
6144:Ns9XgA/96embbWeJvTT4V2jWpZV9Odt5XWSp0nUfet8RoDAG2Zm8WNVM+NAg0l3:MgAl6e+bNVSB+1WhUfezZ2ZfWNK+363
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e51c51539ec7154f64fe545b1896bac797661c075bf420e129601ad22da2500
Files
-
3e51c51539ec7154f64fe545b1896bac797661c075bf420e129601ad22da2500.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE