Behavioral task
behavioral1
Sample
546838c79838df6b3a7c95b1631c660e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
546838c79838df6b3a7c95b1631c660e.exe
Resource
win10v2004-20231215-en
General
-
Target
546838c79838df6b3a7c95b1631c660e
-
Size
355KB
-
MD5
546838c79838df6b3a7c95b1631c660e
-
SHA1
45d8bc608960e6fcea9eeb007e53b00c688c4521
-
SHA256
e17dfbe488d300f1543e780d3de7ed90d983dca2c5c5271544b00248b4d18c0a
-
SHA512
5fa47dd653605e0c8d76cf55c7cfe1114d8270368e100c69195e11e3c42086b3d0eb490faadaabc410cf84d74971e0606839755c344bb06c6b198c0adfd4ebb1
-
SSDEEP
6144:4PXb2qud9AXWN9KhxlStlc0TVI+YYvIbZcnXZVz+R3reLA6Heu3mBNhEBjNoqSr0:4P6qud9AXsmxlStlfVzYkIO/+2tFmJEp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 546838c79838df6b3a7c95b1631c660e
Files
-
546838c79838df6b3a7c95b1631c660e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE