Behavioral task
behavioral1
Sample
46cdb082cb562d5cb33cb0e48f4bcf31.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
46cdb082cb562d5cb33cb0e48f4bcf31.exe
Resource
win10v2004-20231215-en
General
-
Target
46cdb082cb562d5cb33cb0e48f4bcf31
-
Size
3.8MB
-
MD5
46cdb082cb562d5cb33cb0e48f4bcf31
-
SHA1
2453c09d856f879b5dda7f3a243c07ecdc82e45c
-
SHA256
f786dfdedb9e941542581ac6b83e56cf8a6ebc47f288ddd5293b027a50f921ad
-
SHA512
8ee32e0a2d2ec0eab33386fbd7a4c61636e542df99fb78981d670b0df38e5454ea80a70d386535c513719ba61571d4bbddaf264251dbcf2cb4c098d629dc2a4a
-
SSDEEP
49152:ACC8aZeNyDknanLfizt5Z5eQo+HuZjylmyPBChjOaBX8OKzq1182jKWAkKYcSkdo:ACOcNyRnLfOtL5tJfm8BwtBX7PdAdvo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46cdb082cb562d5cb33cb0e48f4bcf31
Files
-
46cdb082cb562d5cb33cb0e48f4bcf31.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE