Behavioral task
behavioral1
Sample
c46b035df19b44df8c81f37ab031bd4f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c46b035df19b44df8c81f37ab031bd4f.exe
Resource
win10v2004-20240226-en
General
-
Target
c46b035df19b44df8c81f37ab031bd4f
-
Size
1.3MB
-
MD5
c46b035df19b44df8c81f37ab031bd4f
-
SHA1
d9d1b455d9c46bcea918fb244cef0af8c0646575
-
SHA256
20bc328d114113cee147ca4e2900e7fa8066edb72a2b3ed0e5e6b9f2e73fe9d9
-
SHA512
4630f6523b1388415fe6a10a4726ac84e9b4170f4ccad860b307a73fcba63854c572f2bc04acb0589e66c749b7da7d75194ec027ad91577f12764e7c41e6522b
-
SSDEEP
24576:g95ooKw0UYoVJ5jbUVlAUGwNbwPWnuCXnw8I6TvvtBJ+d9pu80roJvKeSWta3t4K:eWoKw0UYiJ5jbo5GqbwPWnuCXnbRTHtf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c46b035df19b44df8c81f37ab031bd4f
Files
-
c46b035df19b44df8c81f37ab031bd4f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE