Behavioral task
behavioral1
Sample
Malicious_b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f.exe
-
Size
47KB
-
MD5
ad46f0cbbb21d0818c0848cd7de2e592
-
SHA1
75a0bcc515793f6d591401f15dbd54f7137618e1
-
SHA256
b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f
-
SHA512
08af0ad0ed5e792a1ab770300c5af92296d1c422eef5ecb5a27ec289acc9f887f6c0bca917c530f54dd2597d4269e6dde1d4f5b19cde6fda3a2f9e26b0da2dda
-
SSDEEP
768:4wltW9USOAGAQTg1nAplXlfwuL+eRH9/2chGMaboMBCee20V2m//Sr4/5cq3:4w/WpOAGtE1n+TLr/HMOeeem//w4Wq3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f.exe
Files
-
Malicious_b846343ccb7d57dacbb3fc50d31495e62915b2dafb8ba1b5504c75c39e64b60f.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1O`l Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ