Behavioral task
behavioral1
Sample
c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98.exe
Resource
win10v2004-20231020-en
General
-
Target
c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98
-
Size
454KB
-
MD5
7de4cdfa4a04567382cf00cbc3c9f3e4
-
SHA1
6adc2f8c35fb7211eda9b0ab11126659ad901797
-
SHA256
c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98
-
SHA512
c52b266f9cdd178ed194dcfa075350095e6e926d9a05992e941f26339983a26df699b5c5c9fdc0466cf5bf8c4e4a3a35e9832a958dcb6dac5d8f4dd52f6e59fa
-
SSDEEP
12288:7DQOG+1f7i+dc5l151YujSeQgG0Jiheje4KHd/ve8/mA+uk2oSfFH:YHMf7i+dY1RJJih+ez93N/quH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98
Files
-
c946a436f602c8d3a445f69a8a79d1d96af786246e6a15c44e5133371d7d6f98.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 584KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE