Behavioral task
behavioral1
Sample
46cbbea6aff322387d52441e5f7f1d92.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46cbbea6aff322387d52441e5f7f1d92.exe
Resource
win10v2004-20231222-en
General
-
Target
46cbbea6aff322387d52441e5f7f1d92
-
Size
1.8MB
-
MD5
46cbbea6aff322387d52441e5f7f1d92
-
SHA1
5b1f11bbc687032c9476fe3df639bc25e118d24c
-
SHA256
d6ec950a4ce3aff098acb857af2d8d847e9419fa19b205f856123c3bfec3e47f
-
SHA512
8a42796555baef9725968c8765d9fb168f0f4ed433c0f11524b7638adf42b9ea230b730341b82e9c459ee0dd1d7de6a6e6d7c703239a3d78b8bcad9c16f60255
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHZ:SCqm2Jpr0nNM7Dus7Nx25
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46cbbea6aff322387d52441e5f7f1d92
Files
-
46cbbea6aff322387d52441e5f7f1d92.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE