Behavioral task
behavioral1
Sample
6a4195fb64d3cc86e2ec8da82050cfab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a4195fb64d3cc86e2ec8da82050cfab.exe
Resource
win10v2004-20231215-en
General
-
Target
6a4195fb64d3cc86e2ec8da82050cfab
-
Size
2.7MB
-
MD5
6a4195fb64d3cc86e2ec8da82050cfab
-
SHA1
d79fd003a116d17fa532739e01c3abb7c4946f30
-
SHA256
37810986de491fefb9e58effbb9631916199eb3c302421d021c866d69401b713
-
SHA512
39e266dd72e2dd4e0d9c3a55d1f452d3d4a51315d9cb4d812fa55ceab874ab1637c4b399c9d6695229f1681d27068f6f489af415c402c41fe8a77ff6929f6d27
-
SSDEEP
49152:fz6dkEv43rq2AMjTaJ3At9C4x8LuvJbJcha3TyHIr3k/es:fz6dALAMypPqxQajJMe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a4195fb64d3cc86e2ec8da82050cfab
Files
-
6a4195fb64d3cc86e2ec8da82050cfab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE