Behavioral task
behavioral1
Sample
c6a8656d40aae205da55a58f2e244cbb.exe
Resource
win7-20231215-en
General
-
Target
c6a8656d40aae205da55a58f2e244cbb
-
Size
784KB
-
MD5
c6a8656d40aae205da55a58f2e244cbb
-
SHA1
4b79a4a47bf70cded8ca982264afb408a8b356e3
-
SHA256
f81e1bcac42830e07455b724a4c5503740493f2a8ba805779e829aef279eaad8
-
SHA512
e814a5b9d4d44f51d333d3ff8a708d3b6861829b85f91ae186eef6a2ccf3a8f46a58df40f35e03255fc1dd3d4abaa11d5978132410c0f3d003284ef7c045fdf6
-
SSDEEP
12288:Hz1RQArRGrd6pEaLkRx51FugaBnBYuxmIc1Sv2lWZ27Dir8QC6NPutOCLugSZ9t/:HzQy2SEdRd6hmXvlWsWtbNPGO2LSZT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6a8656d40aae205da55a58f2e244cbb
Files
-
c6a8656d40aae205da55a58f2e244cbb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE