Behavioral task
behavioral1
Sample
6fbc201f87bf8f63c09fe09f845cdfab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fbc201f87bf8f63c09fe09f845cdfab.exe
Resource
win10v2004-20231215-en
General
-
Target
6fbc201f87bf8f63c09fe09f845cdfab
-
Size
765KB
-
MD5
6fbc201f87bf8f63c09fe09f845cdfab
-
SHA1
b450eea9d36b8a9a7396525e766242f15f39870f
-
SHA256
9bf10d5bd42a9183560814db33145b401e7cf97dd1958154f22bf2263c72597c
-
SHA512
a303a1a1d789abdf7662835c70bd1004bc0f185759cff3a7e908a1b5881d6699e7418b6a828161524690dbdc4b0197e6480c4705d76eccd11de24f8676dea50b
-
SSDEEP
12288:qhAkoc5jQl5PVcsebB0t/GdTha0fNCUox9kflO9dJ5IECpxOokLZsY:KAnl5O1dXfMqcjukL2Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fbc201f87bf8f63c09fe09f845cdfab
Files
-
6fbc201f87bf8f63c09fe09f845cdfab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE