Behavioral task
behavioral1
Sample
2a46b18f17686b733832fca47d68b909.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a46b18f17686b733832fca47d68b909.exe
Resource
win10v2004-20231215-en
General
-
Target
2a46b18f17686b733832fca47d68b909
-
Size
2.0MB
-
MD5
2a46b18f17686b733832fca47d68b909
-
SHA1
089929c06f03deb8bfc0af3c4243674521b46e2e
-
SHA256
24a987d24f540e106fa925bc3efdb3fbb2a8cae11791aa1940528898e2c0dcd2
-
SHA512
2e7ecf232fb184afe2ebcee6574f5ee96796eca36900bb17dca94da47006ebd8e607d66f49b0364c9e657c3c5095e49c7c7e27c225096ca9afc9fb2ab782f67a
-
SSDEEP
49152:6SbLTfWslDgcFXZa7+98OgI3eHHPBHGcOxHm2HgcFXZa7+98Og:xPTfWslDgc1Za7+98OgI3eHHPBmH1HgZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a46b18f17686b733832fca47d68b909
Files
-
2a46b18f17686b733832fca47d68b909.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE