Behavioral task
behavioral1
Sample
6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885.exe
Resource
win10v2004-20230915-en
General
-
Target
6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885
-
Size
347KB
-
MD5
9c861d143b68e4eaf2eeb03830366175
-
SHA1
b72013645ab7c92a75e7b3e4a316375ac8a7a36c
-
SHA256
6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885
-
SHA512
9a5b9ef581ee04e63dee2fb6f3c4b8f3939745fa83df84d56f23485318c286307ca2b624f5029d5d051a0490c0f1b6785320a31cb365aa20456ef247c2d5b9e7
-
SSDEEP
6144:XQJPDtWvobZArCe9Hgh6fGRQqeZ62WoSmu0PhlFf:AJP5WvobG+R1eZ61oSmu0PR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885
Files
-
6c1f9795598b504f073801e35e8ef75b47b532fd232874f61ffadf82e38a5885.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 976KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE