Behavioral task
behavioral1
Sample
6f72f75f615a6710f295b7b7ceabc537.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f72f75f615a6710f295b7b7ceabc537.exe
Resource
win10v2004-20231215-en
General
-
Target
6f72f75f615a6710f295b7b7ceabc537
-
Size
10.2MB
-
MD5
6f72f75f615a6710f295b7b7ceabc537
-
SHA1
befbcc6c201cbbad04a8c0f040f8ff7da5df32d4
-
SHA256
8e9849b2f278dce42a4d87978708019440ebd06bee066da3a36350f519b58609
-
SHA512
d861a17f6c425e646934bb870c5f4100490fac26a1a452b9d93be2fa7faa8b321eb1f127beeef58c7fde4ddf850c32f9e1595ecd7bc63a00e768055412a25362
-
SSDEEP
98304:BptzCK3dCAm933dNe0vQpv+01Mw3OA3sMt1I1bv9o/3dNe0vQpv+01Mw3:ZWBASN2M0ifIt1I18N2M0i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f72f75f615a6710f295b7b7ceabc537
Files
-
6f72f75f615a6710f295b7b7ceabc537.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE