Behavioral task
behavioral1
Sample
46598e0dbb961272ce5471011e4de88a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46598e0dbb961272ce5471011e4de88a.exe
Resource
win10v2004-20231215-en
General
-
Target
46598e0dbb961272ce5471011e4de88a
-
Size
1.6MB
-
MD5
46598e0dbb961272ce5471011e4de88a
-
SHA1
69c06af851b165d80bc7230fb08e5b150a6a0322
-
SHA256
24403b95a3c20fb918562c20bfd268d4fb12b4af999ff033a1f527a2d0abb7ae
-
SHA512
f7e7c029e19441c8f4851efe75509fcb97bc398a3d5afd21f2cb7e56a4f7aacd3161eaa8646c464f8760c2553425f810c5ba255e89f96e09a9ddbb929f69cdd8
-
SSDEEP
49152:EAeh/JoiwrcakLz0xVbTookU4CkZWcakLz0O:EAeh/JhwrcakcxVb8okbCkMcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46598e0dbb961272ce5471011e4de88a
Files
-
46598e0dbb961272ce5471011e4de88a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE