Behavioral task
behavioral1
Sample
46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c.exe
Resource
win10v2004-20240508-en
General
-
Target
46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c
-
Size
1.6MB
-
MD5
4ecb4d8b2c80b392d1472b492cc5e813
-
SHA1
a65fce5edbfde056dd4c614d27fbb0943b2ad68b
-
SHA256
46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c
-
SHA512
3ef7661ecbd1484e184c0974ab0f96ed117c045f5f2ce9998cf044008640948ee5fdb4c564f288605473fdf3b20814e72ae8696f3aaa924c9fa08ce7d114df0e
-
SSDEEP
24576:VtA1gWHO8Tnf5P9oOzK1/EBcg2gG3IKYYlX1xls/kbDPLHh8yvBSKC/seEOyXt6o:TEgWTnffeFScVgG3IOs/kPP5BSKLVX
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c
Files
-
46b64e6ed0c06396ba73bf73f4ab622fe22b74049082e4e224954d0092040d6c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE