Behavioral task
behavioral1
Sample
e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72.exe
Resource
win10v2004-20230703-en
General
-
Target
e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72
-
Size
361KB
-
MD5
3fcc13485f0624a73d3380ea6f659a17
-
SHA1
780ba82f8fd1ad1518f55f12462dfbd92725b365
-
SHA256
e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72
-
SHA512
cc16f18a170ab1a697c2f07aa0fc5aafd7ee863d54753cdbad04dda231fbb8427e724d660f31893d5731f9b38c813c1b4039744b0959e6f32d1629e6cfd92018
-
SSDEEP
6144:/+Shfmg9CHIoSNw6BLydLGM4++s++j++/++S++Wr:es2IoSNwAe9GG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72
Files
-
e46c719197933c79f8832962a94c5a6a47a62b7b2386ae0420dce4f5426eae72.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE