Behavioral task
behavioral1
Sample
6e3941b407056dbae07bbebcf89d9d4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e3941b407056dbae07bbebcf89d9d4c.exe
Resource
win10v2004-20231215-en
General
-
Target
6e3941b407056dbae07bbebcf89d9d4c
-
Size
6.0MB
-
MD5
6e3941b407056dbae07bbebcf89d9d4c
-
SHA1
c7bad3143d43ae5dad8ac2de29d679a99c9cdb28
-
SHA256
acd613d9c26aa7e90d40273db95eef5f13d66324e666f51a5317f26240b87998
-
SHA512
575efc99769ef2103bc066cc179255e46755208852033558317c260430620cc4178edc796e72792d9a769e765f442c82f85c7ac835a012f56c770c2cecae2e39
-
SSDEEP
98304:fzX4LFAXTcakhy595sgp9cakDAc880xIcakhy595sgp9cak4tqJmWJkfr9cKpcat:fUcdBXTd0aIdBXTd4apdBXTd0aIdBXTy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e3941b407056dbae07bbebcf89d9d4c
Files
-
6e3941b407056dbae07bbebcf89d9d4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE