Behavioral task
behavioral1
Sample
b946804a6c09589563bfd687ff4c2e2a.exe
Resource
win7-20231215-en
General
-
Target
b946804a6c09589563bfd687ff4c2e2a
-
Size
784KB
-
MD5
b946804a6c09589563bfd687ff4c2e2a
-
SHA1
25b5f1a76d720cb47f72acb4e0eb169ca6b06528
-
SHA256
4feb943075354808a22d501cafccd69cae42b3ec996445bb1673ebc095ab4289
-
SHA512
d9095fa7763f22b4064541591a0f4a36d72dcdb131b63155c7dcb415fc5b04922f57f721d66ddf8eeaf0b5d6b293c9d3de0cfb8e8cd0de377f78e4365cf2f0f8
-
SSDEEP
12288:3Mg914EbOftdUybA7CeaWm2eQHuqmHbYy45j+w8fw5xBnAa9n:8gAEWjUybnEm2jtEMyqkf4xBA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b946804a6c09589563bfd687ff4c2e2a
Files
-
b946804a6c09589563bfd687ff4c2e2a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE