Behavioral task
behavioral1
Sample
06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed.exe
Resource
win10v2004-20230915-en
General
-
Target
06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed
-
Size
1.3MB
-
MD5
6dec2a22fafc2f8c1dbc8e01f5ed4f55
-
SHA1
cd8fb8405515b27854cca08ae7818422f7103c9a
-
SHA256
06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed
-
SHA512
d751b98158892be9219c73da75a71c502e8a1a92305a2116636542018b486c7006d2e3025a578a805a77220da1894b9bedf9bcfa7c7ec116f9a19f0a8d6804c6
-
SSDEEP
24576:FKM/KvyJZ3hJu1T3LRuNlhXcIDv/xqrwvXHJ9hC1Ngf6yiBscL0UvzhJHpS:rrZ3hUT3LRo3v/xq+5C1NgfKzQUvs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed
Files
-
06d6a89840babaee77573c3eff676930352fd46a8d3cfd87f6f185b0438c4fed.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 624KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE