Behavioral task
behavioral1
Sample
6cd1724a0ca7a17dd67a719f3971ced0_exe64.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6cd1724a0ca7a17dd67a719f3971ced0_exe64.exe
Resource
win10v2004-20230915-en
General
-
Target
6cd1724a0ca7a17dd67a719f3971ced0_exe64.exe
-
Size
2.5MB
-
MD5
6cd1724a0ca7a17dd67a719f3971ced0
-
SHA1
abfe3ef787de2343e1e4e90028c32d87d20dd289
-
SHA256
f46021389f8237fd789054ef33b255a78fcf565cf77a3e91c5ecca127cc1af29
-
SHA512
fd964a361b19e085a964513a5017723fd03d26da5e1f4e454889edaf5c4877bb788261ed5efda285fdde829ddd941e0abf5737d400df723903d9750b97e5153e
-
SSDEEP
49152:dvSoI7hUlJkOGSORd8mHeRoNQU0Z798xL:dvS5dUvwSOnkR8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cd1724a0ca7a17dd67a719f3971ced0_exe64.exe
Files
-
6cd1724a0ca7a17dd67a719f3971ced0_exe64.exe.exe windows:5 windows x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE