Behavioral task
behavioral1
Sample
746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1.exe
Resource
win10v2004-20241007-en
General
-
Target
746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1
-
Size
1.8MB
-
MD5
d3bb2b2374c295cc2a55c8af44e83a27
-
SHA1
57fd93f58a646538d4e14ef6b1ea5821a392d220
-
SHA256
746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1
-
SHA512
cfa1fcb2d4c6e70395c334b720e0d566032c5677fa5de2527f801e85a3d4e0bec24d0e15f1386935a9426c3982d187aa420e0ad04a9325bfe27681f6bb2f56ac
-
SSDEEP
49152:wNMqQ0kwonLVkZep9nWrPWwONrRoODiGgDWAg2CPaSAnYvJW3BTSXff6YNQVWIPD:wiqQ0kwonLVkZep9nWrPWwONrRoODiGi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1
Files
-
746ffc6db8f16e3e60dfa3edbf71953f20484575b4719c00a84755e75402b5a1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE