Behavioral task
behavioral1
Sample
6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2.exe
Resource
win10v2004-20230703-en
General
-
Target
6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2
-
Size
332KB
-
MD5
d77c8aa07f24739200013cb5717c650e
-
SHA1
f5ca764d55a85eec0d60dd4e5faff615d9a096de
-
SHA256
6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2
-
SHA512
293e10a7327ba5744914435bcc0dbfb0fa2156b102222d5096c0faa39358e8317e82520e438b78dc465dcbb07f1b543978ddae9413912d3f1eeda878c58abd29
-
SSDEEP
768:+hmGD0zyN5e2GV45nCC4rpLYiiW/kiaQthfPsfltjLl5nDc5eu8tZlGFi+qVl1F:+EGDHJKfqtfl5nDUi+c/vt4VGwf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2
Files
-
6ddec8bd7676c07c7cd23cb24e9a91c8dedc1d77d53a0474dafb690b1b1875d2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ikv. Size: 72KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE