Behavioral task
behavioral1
Sample
45bc1c46b765aeb761a1800c82e516f3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
45bc1c46b765aeb761a1800c82e516f3.exe
Resource
win10v2004-20231215-en
General
-
Target
45bc1c46b765aeb761a1800c82e516f3
-
Size
103KB
-
MD5
45bc1c46b765aeb761a1800c82e516f3
-
SHA1
c5e57d34b30a8d2299a3d27fb34a5d3389a4133d
-
SHA256
71534d4d936649d1d3f35cc3fd9474c0a46e85caea2d7841a9faf46291eb432d
-
SHA512
b1c061537e9de47f4b8446dbf513f05250fba8f1dd8d64eff5d85fbb311ed70792dd62b8e25486a0c947ee2b75b5b002e0c3f81715d9edc2f28874e443044ad2
-
SSDEEP
3072:17cWbD3cq0uG+WuSi1/Er/eLkQ9U0/ZxvUhPGout:1F10Z+Wli1/ErCkV0/7uGoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45bc1c46b765aeb761a1800c82e516f3
Files
-
45bc1c46b765aeb761a1800c82e516f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE