Behavioral task
behavioral1
Sample
46779db288edfa54236826abe7ba32fa.exe
Resource
win7-20231215-en
General
-
Target
46779db288edfa54236826abe7ba32fa
-
Size
784KB
-
MD5
46779db288edfa54236826abe7ba32fa
-
SHA1
209174fd5d41c1b0440a2c93835e1c678f3011a2
-
SHA256
35d6c2845003a966959d3c1084145fb63603c43392cf8a02aa75e8a343007538
-
SHA512
200439a7e55e6834044c8e19cf897e8f7bb371f0d0080b5d816e6ccf19f762667cb21fae9b66eda918fd8804add0b0150392458576181d85a37197c001fc0790
-
SSDEEP
24576:3rSKSiMVzgMBLTwPhI0ua2BVT0kZkuwy4ujTp+:76zgm2hHuaAVT0Zifp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46779db288edfa54236826abe7ba32fa
Files
-
46779db288edfa54236826abe7ba32fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE