Behavioral task
behavioral1
Sample
6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818.exe
Resource
win10v2004-20231020-en
General
-
Target
6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818
-
Size
5.2MB
-
MD5
f8245142d39a632d382914f8cdf30c37
-
SHA1
6725eb01f35083b2e0688f96909c6c985acb9892
-
SHA256
6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818
-
SHA512
efcf9eb96930c7d6f39c0dd7294d90a40499bc4df74a67f4d7343a597b6f4db39106bbcad5f7f187d88f19be080bafb7cb80e2166e5b9530448ee969b99c9570
-
SSDEEP
98304:DhC07A0POUWfa80bU3WvpHhPNlH3tULk2Ek:lC07Qv/qVplHC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818
Files
-
6a342d511876c3de3ed2e03be48fcd441a29307244823c8b24b395d0b6740818.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE