Behavioral task
behavioral1
Sample
46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28.exe
Resource
win10v2004-20240226-en
General
-
Target
46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28
-
Size
797KB
-
MD5
a9642138a3b096be9ceb5c467db7a323
-
SHA1
5b3e49d1c544e3538bf29fb42b6fd549afdf92a8
-
SHA256
46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28
-
SHA512
13e5e6b47eb68e95035dc039f22b441fc878202eaa5efa730795837913f82acd855bfc0686f729dab94dabadf4814d8eae41c3e0b458bf76d1da22f5be03f559
-
SSDEEP
24576:l1G/lYi7KAGBGsrgmOFqbOPjV8S3waM+4:HGNYi7KcsrgXobOPh8SglB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28
Files
-
46d5e0f1d1d7214f19b0f8850ed577d1d490d0e580cb9c9d552b4294941fff28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB