Behavioral task
behavioral1
Sample
6bbb8044eff58a6479ebd75ad6f55080.exe
General
-
Target
6bbb8044eff58a6479ebd75ad6f55080.bin
-
Size
93KB
-
MD5
6bbb8044eff58a6479ebd75ad6f55080
-
SHA1
ceb28bde8ee0748603cac37194f6dfb26db514ec
-
SHA256
93ee3814e7ddf424316b76a39d31d6a13b93419cbf31a4fb5da2bd3bcbcb6b9d
-
SHA512
bd1dfbe272ab9288c11b6427802452703f2618a409e96619a82557725e6d60d4e5983da202bf41775630559a856d3a2fabb01da6a9c9950bb86f5d8fe58d06e5
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw51Mh2BTAFyA:9hOmTsF93UYfwC6GIoutz5yLp1MhSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bbb8044eff58a6479ebd75ad6f55080.bin
Files
-
6bbb8044eff58a6479ebd75ad6f55080.bin.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE