Behavioral task
behavioral1
Sample
46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6.exe
Resource
win10v2004-20230703-en
General
-
Target
46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6
-
Size
12.3MB
-
MD5
ce53ad3726c9f8562db59eff4d8162f4
-
SHA1
b2965c91efe1fdc0d5254a9fe863e3e5047a680e
-
SHA256
46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6
-
SHA512
001d82b25d56e6b6b1e20ccd85949d97f8778574a3b54f15e29ab69d4eded45b2cd76b869348f40c6f446d008ad7e3b58f7f93825ed973a490ba0aecbe97c68f
-
SSDEEP
98304:pbSgGGQgYkuOG5e4scLl4U8PtblLaQKFvus6uipQkr:p+gG7gNGGcL+U8lBLrs6b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6
Files
-
46f9fc0e57417870b9c89845e65059b7200b34e4eecd0dfd6fe2b3e8e8f7eab6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 11.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE