Behavioral task
behavioral1
Sample
461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a.exe
Resource
win10v2004-20230220-en
General
-
Target
461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a
-
Size
652KB
-
MD5
b73ffff9440ae120ea1ad4841c4aa1d6
-
SHA1
60e4aa09a8b3bb3fb9530464b9b04e6581cdf390
-
SHA256
461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a
-
SHA512
60f57e9da7fdc4195ba8247b848928bfc0778e854269b3df9abfc854c8fe101f6ef3cda92ab18c28d1132026f0edefe101a4c2e02f21a5642b745118b4cbec1c
-
SSDEEP
12288:VkgeHyBnRviMZCAZi+ES9+J5yoKOyn/zv:1ayBnR/lZESw55KRnT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a
Files
-
461b9dafa8475caa3c8dda46281248f77d9c6a1ef2dcbeb97babfa7c2b31a01a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 373KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE