Behavioral task
behavioral1
Sample
6b565c06910c831162918a29f2198ed4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6b565c06910c831162918a29f2198ed4.exe
Resource
win10v2004-20230220-en
General
-
Target
6b565c06910c831162918a29f2198ed4.exe
-
Size
3.2MB
-
MD5
801e6805f1d505f91f951a91634421c6
-
SHA1
8050cb59a1e77f9975a8c29c7eba1011c78c0327
-
SHA256
b0e98854335490d4dcf5dcf7d76db1749b3bbd4b716e8c26c0eb2718591b44ec
-
SHA512
f4b784bccc39a8b8125feb446e95a525de61c2aa80c2bf0ed5624ef7cdd645459895dde3e96a6e9baac26451dd3f55b636a79aba50e53c72f4747b8cc92896d5
-
SSDEEP
49152:NS6mKehDeOhVlDn55F8Fe2QO/El96Ih6AbAwjypfGv9wUsw31aaog:o6PesOhV5n5cFe2vEnFzjSf3UX1aa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b565c06910c831162918a29f2198ed4.exe
Files
-
6b565c06910c831162918a29f2198ed4.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE