Behavioral task
behavioral1
Sample
45c4faed62f4e177ae39636ad64dbce6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45c4faed62f4e177ae39636ad64dbce6.exe
Resource
win10v2004-20231215-en
General
-
Target
45c4faed62f4e177ae39636ad64dbce6
-
Size
2.6MB
-
MD5
45c4faed62f4e177ae39636ad64dbce6
-
SHA1
0e299503ce1798985f8b1bf3ee21149791f293b7
-
SHA256
9e99d84469ec7f68d2f01314e1e3086477ef29b583fc57f6c1cc2f55b176c57a
-
SHA512
9fe13062935272c8bb4f2d3995ec5f2b258e348aa2f06056a8a2f41bd4684dd3a4a1d34047d3c3e50f42107c1445a93a056c2aa7ced22a04d8f2c7ec1b4a2ac4
-
SSDEEP
49152:PUZGNWhyML+vhl81hu4aZ4Hc4Mpx+jSGMP6rH/ay3:QGu5LRPuNyW+MPq3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c4faed62f4e177ae39636ad64dbce6
Files
-
45c4faed62f4e177ae39636ad64dbce6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE