Behavioral task
behavioral1
Sample
46faa2428161bb0a2bd2ba5144dfd81e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46faa2428161bb0a2bd2ba5144dfd81e.exe
Resource
win10v2004-20231215-en
General
-
Target
46faa2428161bb0a2bd2ba5144dfd81e
-
Size
292KB
-
MD5
46faa2428161bb0a2bd2ba5144dfd81e
-
SHA1
be876a517acc0c33e52e2ceb9a1763a8a51314d1
-
SHA256
0f62f7c61ac88eb160b5c27be21db62382435c2f291030906e71071c096f3e4a
-
SHA512
13aaa94d476433141b863340901e5f91ac28b6a863dddc9506b72715c25a3bd7c05fd4901165640ebc3d2309f77062252fdef785927cace6e6c37a557c5409be
-
SSDEEP
3072:4Up6s+bA90Kv4T0sYDOzOo7v2InSzLnW4Kxw0L6L68MD6bKNzdsjRdZanI4:1AKO0jDOzOAvJSfhkpLt8MD6bKhWjHZ4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46faa2428161bb0a2bd2ba5144dfd81e
Files
-
46faa2428161bb0a2bd2ba5144dfd81e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE