Behavioral task
behavioral1
Sample
6a378395d532b883e781859517f5808e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a378395d532b883e781859517f5808e.exe
Resource
win10v2004-20231215-en
General
-
Target
6a378395d532b883e781859517f5808e
-
Size
133KB
-
MD5
6a378395d532b883e781859517f5808e
-
SHA1
570a4e2a2c6686ab73f149781aeeb1c9733063a7
-
SHA256
186b79d9b2fed8f2997ec065abcb67e11dba9dfee22f8003b3e6a6e3a71b7380
-
SHA512
95db08d04be883bab0d5fe8b977e871b7fd7f0d6fb648b0b462a8e323e45aab59017a9c24c73153eed644ccfc65f47b182c46030ee56b8f2dcfe46d5b3a15b77
-
SSDEEP
3072:pVkQBEVrYfwNcpK5Cqet82xwoD6FOhJbqm2GMeLDHLoPKHLx6Q:jkbafK5CRmo/qmZnki8Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a378395d532b883e781859517f5808e
Files
-
6a378395d532b883e781859517f5808e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE