Behavioral task
behavioral1
Sample
46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049N.exe
Resource
win10v2004-20240802-en
General
-
Target
46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049N.exe
-
Size
41KB
-
MD5
ede18d61e0fc04702c27ab4671c9ddf0
-
SHA1
89d436e4126405237af36dcee6201638fd6d6cda
-
SHA256
46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049
-
SHA512
5b62c43e06df617b0a7d6f012cabfcad52059dca959e9ac8971de1aa8f4998a8cce670fed139c6f91fd163986df6285cd36369e2038ca0f99f1ba8a42a9465bb
-
SSDEEP
768:ZA7pyIsl7T2TYppeXf87L5yaihOXvX4vLYFc6vlBmPDnH6R0J:ssR2U2XO5Zic6Ja6/J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049N.exe
Files
-
46bf7c89f61283e149bcb5ae999edeaff369c0e0d3a420ac7a25f2511d77e049N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE