Behavioral task
behavioral1
Sample
c946bf34e729f5c420ad8b3da178f094.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c946bf34e729f5c420ad8b3da178f094.exe
Resource
win10v2004-20240226-en
General
-
Target
c946bf34e729f5c420ad8b3da178f094
-
Size
448KB
-
MD5
c946bf34e729f5c420ad8b3da178f094
-
SHA1
af8a71b119b8e1c37543209cf6c67eba18d41e58
-
SHA256
2c78fc38292b33b57fe4a5da9c509444013029951b22dbb6c5f22774424498a4
-
SHA512
02b58acdcbc43dc7116dc97017ae8fee46e4ed63cfc609bac6147f7839feda2ac796e1495890ca12cddfea7a069b9270d2ef62f8719d0ea304a2504743e55240
-
SSDEEP
12288:1CsAE1uso6Lah7MnEHYTXoDX/jdTzAalOPQ:JKsewEHooDX/jdfQQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c946bf34e729f5c420ad8b3da178f094
Files
-
c946bf34e729f5c420ad8b3da178f094.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE