Behavioral task
behavioral1
Sample
pngquant.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
pngquant.exe
Resource
win10v2004-20230220-en
General
-
Target
pngquant.exe
-
Size
259KB
-
MD5
fe7e2bcc831773875d6ad1d981b36c52
-
SHA1
6cfcf753d2bfdf9a689312529d35f847e5a23afc
-
SHA256
33c3e9de690a5a8347318c815e8279d7c1007991be72cbc4e098fbf1a9279975
-
SHA512
ae982f72ae1427c661032849486e0836a62f2de0dba49f10c753cc631163bf002cc73b65bb81772c7f70e8a390cdb2d02934d631781855fc93820ed9dec67bb1
-
SSDEEP
3072:Tj9823rGEfJ/KCxzTX/eGZ6tleFv8P8NqAe3xMJmG1YJQXKOBAout6j9TLrEWU:TdhRxzTvGlK8PknAaY+XKjoS6pEWU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pngquant.exe
Files
-
pngquant.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE