Behavioral task
behavioral1
Sample
f6b0eace597e3e7734257eeffe9fdcab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f6b0eace597e3e7734257eeffe9fdcab.exe
Resource
win10v2004-20231215-en
General
-
Target
f6b0eace597e3e7734257eeffe9fdcab
-
Size
3.0MB
-
MD5
f6b0eace597e3e7734257eeffe9fdcab
-
SHA1
024dae37ac580b58d958a9c2a257f5fec4536c1a
-
SHA256
401e7c2281acb095c94d9c574edf8c9310c00d22ffedc04ebdd7275417a6ec55
-
SHA512
f4c812bc4e9e3927325b255aed22480c3f17c28ad6bd43baae950726f9ed1a4600d8c94a4a152bfbf760b1bb77335de66ea2cc9c0c65df09f8949e06ef75e23d
-
SSDEEP
49152:LPhDcPiWsVwcakLhukrCZ6T6GfUstcakLOHTYGxGvXkscakLhukrCZ6T6GfUstcl:LPhDMiPVwcakl1rCZ+6GfUstcakCHTYF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b0eace597e3e7734257eeffe9fdcab
Files
-
f6b0eace597e3e7734257eeffe9fdcab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE