Behavioral task
behavioral1
Sample
466ec2b7c566caf8350b89b05ca90b39.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
466ec2b7c566caf8350b89b05ca90b39.exe
Resource
win10v2004-20231222-en
General
-
Target
466ec2b7c566caf8350b89b05ca90b39
-
Size
126KB
-
MD5
466ec2b7c566caf8350b89b05ca90b39
-
SHA1
ae218d595f96396b6738151a6da1572afb7a5671
-
SHA256
42036e9195930a4688fe9c766342623a26ab4d5c90cc9c80e9fff0c448a9ce76
-
SHA512
b2850160c8b54ef2e9b0dfe76ad9256905781bf6dc7d7cd1ee634f04d28e2a1874c7f4faf264c29ee476625483fc8afb289fa005d02c9a5800e0f1fba7431048
-
SSDEEP
3072:Z5OE8YKu4D3avLOm5UxUz8QzbBgWgXoutPZLWm:cw46x5UrQXBUoSR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 466ec2b7c566caf8350b89b05ca90b39
Files
-
466ec2b7c566caf8350b89b05ca90b39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE