Behavioral task
behavioral1
Sample
6356af6abeb1a2b64354dc4b5256a646.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6356af6abeb1a2b64354dc4b5256a646.exe
Resource
win10v2004-20231215-en
General
-
Target
6356af6abeb1a2b64354dc4b5256a646
-
Size
605KB
-
MD5
6356af6abeb1a2b64354dc4b5256a646
-
SHA1
9e2b9d8b8766c77309bcac8147b54f67e1b90f27
-
SHA256
0547978e684e3ee1ddce2f7f216d6fa54d490e59a73616609279c2ad094c00cd
-
SHA512
77b0cdf540a6769d0f69fe69b015da236f24865a6c7681b995cdf8ba79961b37bcddbedf15b8c326899a9f5d080c66f8acf05ed8b0437cae7e0617336aa0df29
-
SSDEEP
12288:5PAjoaeS+iWaka0j2mF7WtjcOnA1uIqRFsRm:ykWf2a09F7WtjcOA15s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6356af6abeb1a2b64354dc4b5256a646
Files
-
6356af6abeb1a2b64354dc4b5256a646.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE