Behavioral task
behavioral1
Sample
346d5bfca8913288bf4a016b8bfdeed6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
346d5bfca8913288bf4a016b8bfdeed6.exe
Resource
win10v2004-20231215-en
General
-
Target
346d5bfca8913288bf4a016b8bfdeed6
-
Size
244KB
-
MD5
346d5bfca8913288bf4a016b8bfdeed6
-
SHA1
b24443e6a5fa19bd489d49011a3217d162e4d9da
-
SHA256
e15f9450f7c9647daa92f2edec2eda6da7e93cd0738fa2cc3acd2295e6b46eac
-
SHA512
6047082f47c8f1a25343ac133bf3f754bd4140986f62077f4ddb4574f115741f6a498786d7e094e7ad050c7f396a70cb04aa0301ac664d6ac9264f50a94628af
-
SSDEEP
3072:c0kvIgqKUtqLWZ6Qe2WDCLW3KlnRmyQLwY16X20bIQ3GCwIK1v4nlm+5XcGNJ4zq:cl8KWs/bWq+nR6xtEstSlckJ4Ov
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346d5bfca8913288bf4a016b8bfdeed6
Files
-
346d5bfca8913288bf4a016b8bfdeed6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE