Behavioral task
behavioral1
Sample
46d29e9ed56705597de19e93fd49029e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46d29e9ed56705597de19e93fd49029e.exe
Resource
win10v2004-20231215-en
General
-
Target
46d29e9ed56705597de19e93fd49029e
-
Size
135KB
-
MD5
46d29e9ed56705597de19e93fd49029e
-
SHA1
093c882ec9e6d9d3d17f89b42e01e45d1cac75e4
-
SHA256
114c2a72e96c2f3ca05b8fd1d0542618f09b1a950845c1f7826c67de0e16ec7b
-
SHA512
bbc878bdcee58b45499e92f03bbc14805e57b10c1a6d22f380d65ea63ef1db72b70d1ccecd5ea132e63de35528705da4b4f44be10f4e38d3f85c5e9aa67e6bd0
-
SSDEEP
3072:sr3KcWmjRrzSMr3KcWmjRrzSxCXRcPzYzmyaUCRkLl1rsz/rI1:/PB4RVPnLl1Iz/e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d29e9ed56705597de19e93fd49029e
Files
-
46d29e9ed56705597de19e93fd49029e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE