Behavioral task
behavioral1
Sample
6fb077080ec0ae0f4db9b429cb075820.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fb077080ec0ae0f4db9b429cb075820.exe
Resource
win10v2004-20231215-en
General
-
Target
6fb077080ec0ae0f4db9b429cb075820
-
Size
221KB
-
MD5
6fb077080ec0ae0f4db9b429cb075820
-
SHA1
afaecb932d67ae9c0424ca998ba5d6e58bf48954
-
SHA256
af9370cd960310316e214b29fd5f9e70215f4507c2b9a067ea2a4a06c6752983
-
SHA512
c6943128755a3100f197aa3ca14c559e257db43b462939dbb98a5e7407701632621ddc22a0f35f4054a6a2d7926a8def22972dc207409e8020781b3ff2023441
-
SSDEEP
6144:hGNchke8nYrAy0sYoQo/U8IIazHD1DHQDzaiKiLA:haccCju8JIIazHRARKF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb077080ec0ae0f4db9b429cb075820
Files
-
6fb077080ec0ae0f4db9b429cb075820.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE