Behavioral task
behavioral1
Sample
246e24736b72a929b0dceefd5dd0c433.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
246e24736b72a929b0dceefd5dd0c433.exe
Resource
win10v2004-20231215-en
General
-
Target
246e24736b72a929b0dceefd5dd0c433
-
Size
133KB
-
MD5
246e24736b72a929b0dceefd5dd0c433
-
SHA1
debda58ec061f1efb7e4731e3d8addfeec551513
-
SHA256
73f5885d16bc56e130afb190a8946a9e2c37e70fd4ef4a2b7188faba74600fd1
-
SHA512
f59a5707e891d2089140117b65775750a51031a05654024c8e41c2c7c2e7786a62f0fc843c86b06ee67f00842e81b06521a78a59dfd69c9555b606768b414dcb
-
SSDEEP
3072:WV1qgJiqbUiC/XU8J93UZv+nypymASYFVkfeNhqmdJQ:WMqbbwvUHymASY8feNgcQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 246e24736b72a929b0dceefd5dd0c433
Files
-
246e24736b72a929b0dceefd5dd0c433.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE