Behavioral task
behavioral1
Sample
c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791.exe
Resource
win10v2004-20230703-en
General
-
Target
c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791
-
Size
3.6MB
-
MD5
9935e12ccb183c477ef8bb7b0404f2c7
-
SHA1
737cb8b03302a861556349de4fc1e6fae773bfa3
-
SHA256
c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791
-
SHA512
6a243a2a003d642deed7028ce1b1210d7098236c3277099a349f19a9d8f7ec0b784d32280c2ab1251eaa7223b2083b29118dfe325ddfddb880627f8c39205a3a
-
SSDEEP
98304:D+MCh60zwbMLbbIpq5W/eTTBlQlk5fSY9J7K:r100bMLgpq5SeTNlHfXD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791
Files
-
c6bc065864ecead7748862da9004869962b2df13829c3acd900a56c8d5eb6791.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE