Behavioral task
behavioral1
Sample
0466396364b4feb5c9bfe57f4ed35522.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0466396364b4feb5c9bfe57f4ed35522.exe
Resource
win10v2004-20231215-en
General
-
Target
0466396364b4feb5c9bfe57f4ed35522
-
Size
542KB
-
MD5
0466396364b4feb5c9bfe57f4ed35522
-
SHA1
56d95670ea34adcc61d1879a6ae0744b4f35c346
-
SHA256
e77bdd4f48bfe686d948fe050ccc6e7ca899d9231194bbb0b814ac53b98892b7
-
SHA512
48f28c7c17c3a7b9134ab7959b13083a0869c76e14e0f3ed1181865c8bbe1e9d4cb47b95266e9b3c00dd93b05a8fc607d4dbaa1d17277560e2005ff8f22de233
-
SSDEEP
12288:6+P5NgLEJj+MshDwi+hdUiRTCwwyAJLU2ts2hMmigQCxDYAjmi3rk+RI:BBGEx7liDaCNvC2PdDYAjBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0466396364b4feb5c9bfe57f4ed35522
Files
-
0466396364b4feb5c9bfe57f4ed35522.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE