Behavioral task
behavioral1
Sample
b46b56adf243f5613e636c40360aacf1.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b46b56adf243f5613e636c40360aacf1.exe
Resource
win10v2004-20240226-en
General
-
Target
b46b56adf243f5613e636c40360aacf1
-
Size
2.0MB
-
MD5
b46b56adf243f5613e636c40360aacf1
-
SHA1
06cff07594ae203a0dd4d4c7df6e7c170b4b5915
-
SHA256
86881c01ad141f93fb8911dfb1809bdc9b06c00e39f76231e115c7736ac801de
-
SHA512
444f2afdc771c41dbefe8a48273b7d1ce33fdcf4c05f89c2a2d0e9160c21797990edaf0a9641b0c9b1c8f81d736d7d721f93f94bae60836f43bafb7f51f75921
-
SSDEEP
49152:49wowOr0w2EmF1cakLz0ibq6yqhlkO2juiYT7kvyDIucakLz0ibq6yqh:49wFOrb2zLcakcibiqhlkO4YTIvyDIu2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46b56adf243f5613e636c40360aacf1
Files
-
b46b56adf243f5613e636c40360aacf1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE