Behavioral task
behavioral1
Sample
46d6a04753347c62402914d832c8ec17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46d6a04753347c62402914d832c8ec17.exe
Resource
win10v2004-20231215-en
General
-
Target
46d6a04753347c62402914d832c8ec17
-
Size
5KB
-
MD5
46d6a04753347c62402914d832c8ec17
-
SHA1
77419db5a7877630822116e08d01064087ebea20
-
SHA256
e35a6cb60daeb0b936146c1027d5953e48827334188688a7ed0e50c586e19ed3
-
SHA512
693f5e458bd03c2f112a5dd095a36c2e4737fecfd7dccf96f95193c6604ddd74148f21b1c46a63e3058bd9b53603b464d5c5a5ddee01bf22294a63fc9ddd1aea
-
SSDEEP
48:6+7tXO9s+xMfs5Ko0TOsrOv2cqIVy4pPTT/QXEYS3SeJY8JTaehguhIv8rnFxwxc:D7lu+fA0aG0y4pAUnVIv87FxwxdawrQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 46d6a04753347c62402914d832c8ec17 unpack001/out.upx
Files
-
46d6a04753347c62402914d832c8ec17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ