Behavioral task
behavioral1
Sample
46048b0b22c196b3705a45f112ffea477ea8ee891f7c1e21d83e6d667996d5be.exe
Resource
win10v2004-20230915-en
General
-
Target
46048b0b22c196b3705a45f112ffea477ea8ee891f7c1e21d83e6d667996d5be
-
Size
266KB
-
MD5
79fdd95a70c558782ae63e3ecd514d6c
-
SHA1
10eb35e8a41482e10a46920b1e26f06328615033
-
SHA256
46048b0b22c196b3705a45f112ffea477ea8ee891f7c1e21d83e6d667996d5be
-
SHA512
83686712bdc3b098581e13b6ab7e6a886cb2c715c1875c5a3755ee1ad0c89de13c0b66c4ff7dca2dda070bfb96c05ff12621aa0c114c852c1832dfa1f9a52f26
-
SSDEEP
3072:ZNXEGZJWhfNFC4S60+XoLczrVmXXDdpF1trHlJkbZ+Y+x+tfnEafTWei0H01ne4S:3XzKdNY49u8rVUHtTkKInEafRF01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 46048b0b22c196b3705a45f112ffea477ea8ee891f7c1e21d83e6d667996d5be unpack001/out.upx
Files
-
46048b0b22c196b3705a45f112ffea477ea8ee891f7c1e21d83e6d667996d5be.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ