Behavioral task
behavioral1
Sample
746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488.exe
Resource
win10v2004-20240226-en
General
-
Target
746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488
-
Size
1.5MB
-
MD5
7ecb11165bea49a57a87e916dfb7fbde
-
SHA1
31eaa50a2c52cdb0a461e07ded3595ceedef1f8a
-
SHA256
746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488
-
SHA512
06d6ef85a1eddb66c4dc8e8c2445935c73bbf9baecaf1825c2896d21f6ed77d44c5babc6a10c85cf7bdac6df3930ecd33d61ebd37f54afd1c7d8168ccfc2ceda
-
SSDEEP
24576:A8wjXLMgApp6NnWKogau5ilZ92GHQylx1Sh3ewi7/SCI4fLuP8VzToKydkTIT:AnXLMP4Wnruk74GHN/7/9dfLuP8VzwdZ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488
Files
-
746b46ffb35dd5b06ce03bfa11a47281337f7296eaefcaf57d869abc44735488.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE