Behavioral task
behavioral1
Sample
6aa4872d6c0f287eaec20ef4aa27ae520b15754b3705b71a6fe052d36e325cc3.exe
Resource
win7-20230831-en
General
-
Target
6aa4872d6c0f287eaec20ef4aa27ae520b15754b3705b71a6fe052d36e325cc3
-
Size
639KB
-
MD5
6fdd85f4f550f998a65c0b6b295261be
-
SHA1
2076af2975653125cc3a08d2d26364697dd05c5e
-
SHA256
6aa4872d6c0f287eaec20ef4aa27ae520b15754b3705b71a6fe052d36e325cc3
-
SHA512
a2b667eb8df8d4c1b383b43c9eab77c00bc541f6d41694eab1513dcf1448cbfe2aa254e7c9f36869db5dec5f15d76f63cece9b33948762f843cbb4347f0a6bfa
-
SSDEEP
12288:eIX274yClmDDq2tvcsXgD5IOSKWT4kbsWSkoSe:zm740PcTvIT4kNSv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa4872d6c0f287eaec20ef4aa27ae520b15754b3705b71a6fe052d36e325cc3
Files
-
6aa4872d6c0f287eaec20ef4aa27ae520b15754b3705b71a6fe052d36e325cc3.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 560KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE