Behavioral task
behavioral1
Sample
6e7cc1f0cf4a92d82a9673acc9ac292c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e7cc1f0cf4a92d82a9673acc9ac292c.exe
Resource
win10v2004-20231215-en
General
-
Target
6e7cc1f0cf4a92d82a9673acc9ac292c
-
Size
3.2MB
-
MD5
6e7cc1f0cf4a92d82a9673acc9ac292c
-
SHA1
4f13797ed4bbba32febf1f71f880ec1b57f996e0
-
SHA256
f4a70543b1120cd2781d126e4b84c7075a6383e2934379d6b13b4b90b91e1adc
-
SHA512
e7f771aedf07e2eb2f403fca9280540b313b8e5a5b81d56afbc1c37bd1679f6902ac8b9501974b878a5ff7914b0062a7b48d996755fe7c86b41aa30a43c60327
-
SSDEEP
98304:Q8u8GjoFnPBX1cakcJu4ptmi4NBcakc1OjI7/qmcakcJu4ptmi4NBcakcO:du8IiPBX1dlJuitmi4NBdl1NddlJuitH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7cc1f0cf4a92d82a9673acc9ac292c
Files
-
6e7cc1f0cf4a92d82a9673acc9ac292c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE