Behavioral task
behavioral1
Sample
6f068461d466e3c3ad1c576982028080_exe32.exe
Resource
win7-20230831-en
General
-
Target
6f068461d466e3c3ad1c576982028080_exe32.exe
-
Size
380KB
-
MD5
6f068461d466e3c3ad1c576982028080
-
SHA1
5dacb272aef9f9c3d4f44a52f212f6298258672a
-
SHA256
04f7057128f9fc21ccf0c3dee00897ffed455b7b1414d9a1913a64a52eceebc3
-
SHA512
ba7371cb2d9fef9b7379f2d1e1445d9435dd3aa196efe41540ae14b6e1c3ec5e277b36c06656e883ebc1bb95c15ffaf198b1649f8b72937223e2cfe981e478c8
-
SSDEEP
6144:zcm4FmowdHoSgWrXD486jJq1BStv4Ib1HmK2oBl8IUFy:Z4wFHoSgWj16A3StvxKUl8M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f068461d466e3c3ad1c576982028080_exe32.exe
Files
-
6f068461d466e3c3ad1c576982028080_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE