Behavioral task
behavioral1
Sample
a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6.exe
Resource
win10v2004-20231020-en
General
-
Target
a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6
-
Size
2.7MB
-
MD5
2567f56cc106c5c0c8a61a72e2707355
-
SHA1
23b34d73fc4bff9e27d8413428d322b8e6d2b99b
-
SHA256
a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6
-
SHA512
ced7b699318f70b36e96378c19c5034ea2f9015f05671a9aca970415d13502861706f5746cf6ee8a020284466e58113b1c6ad1808996bd609b29b2ff74f8e097
-
SSDEEP
49152:XvdDxqCmSdDHgniLxI1HkfzCPrQhsNPJLUh/FWWHWyCr15Gh2e6gSY9:XvdICmwkiC37Z09W4CxKGl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6
Files
-
a6e0ca43f0fc41d808602ecc13b515348d769ee26003bb62964a3d5aefc1a2b6.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE