Behavioral task
behavioral1
Sample
6bb33ea6dca12b1e8e6f3f4266678667.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6bb33ea6dca12b1e8e6f3f4266678667.exe
Resource
win10v2004-20231215-en
General
-
Target
6bb33ea6dca12b1e8e6f3f4266678667
-
Size
1003KB
-
MD5
6bb33ea6dca12b1e8e6f3f4266678667
-
SHA1
b43af640481ee06a818d33bfc29188c10f2a14d1
-
SHA256
f953cf52b3d10310974a229e244a76b9d34ffb143446e8d63f6239a881588023
-
SHA512
c6cb415cf3c370cad74afb90806b7b09a467d788b12ba0843eb6a92cfdd3cd278c53a251b0373f3c6cf98dfd499685c866c3a8b1afb8ad56bb254ca0450679bc
-
SSDEEP
12288:iuu6cdy3GKVhF4AOBfWTdy7f8vZvwtFuHKwGbp1tRd952AT4n6wkKMxQ5Z2H8/+F:dT/7VVcOTZvwXSKBr92t+Q2HGP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bb33ea6dca12b1e8e6f3f4266678667
Files
-
6bb33ea6dca12b1e8e6f3f4266678667.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE