Behavioral task
behavioral1
Sample
46dd86102993455bb962f8b73838a08295494586be67b9ade418fba88f4314fe.exe
Resource
win7-20240903-en
General
-
Target
46dd86102993455bb962f8b73838a08295494586be67b9ade418fba88f4314fe
-
Size
6.9MB
-
MD5
e597dcef88fb27cf2f24fa022590a283
-
SHA1
6a214f3d14170a2a2bd78922e07ce571ea02ff96
-
SHA256
46dd86102993455bb962f8b73838a08295494586be67b9ade418fba88f4314fe
-
SHA512
45d64cab416a29548a408652dde8897c59bca90648c4ed60202f583659d7696de353663aa1643d27c3a038980056aa7e532cc00b8910a5ced6f3169f85b95a5c
-
SSDEEP
196608:dJ/4AOTlI5yCpFyNwn+oSTXOO4wDvZtlr:dJAAOTS5ybNPoSTXOOZtt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46dd86102993455bb962f8b73838a08295494586be67b9ade418fba88f4314fe
Files
-
46dd86102993455bb962f8b73838a08295494586be67b9ade418fba88f4314fe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE