Behavioral task
behavioral1
Sample
6c6d73ca5d659dc921ed373f1fd400a0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6c6d73ca5d659dc921ed373f1fd400a0.exe
Resource
win10v2004-20231215-en
General
-
Target
6c6d73ca5d659dc921ed373f1fd400a0
-
Size
10.2MB
-
MD5
6c6d73ca5d659dc921ed373f1fd400a0
-
SHA1
6bc42147a993b8f6375f21a7050d949e134188e1
-
SHA256
2c490ea3882d51ed667027eea69d9e61c17efc5c4f0910f3e5f03c8560288209
-
SHA512
ec0aee7af45762487d4461fe36f8b61c293cf428f2ff345349e8f6fb3019f83daefdb4170dd45b5ff91bbf3f8ee33bc7490e6bd7c238ff989250ed8e7d8a2232
-
SSDEEP
196608:wjHIG0Mcm8085M6gERnulkcTMcm8085M6gERnu:8HZ/R85M2R0/AR85M2R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c6d73ca5d659dc921ed373f1fd400a0
Files
-
6c6d73ca5d659dc921ed373f1fd400a0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE