Behavioral task
behavioral1
Sample
6268ed84a43fbcba5b61f232759292e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6268ed84a43fbcba5b61f232759292e8.exe
Resource
win10v2004-20231215-en
General
-
Target
6268ed84a43fbcba5b61f232759292e8
-
Size
7KB
-
MD5
6268ed84a43fbcba5b61f232759292e8
-
SHA1
3248ee138dc5809bcedaeb88fd9f3eeda54f5443
-
SHA256
f06ff8f084e4076aab195b143ea3a0b61891a45a69f6214101b500fb95853f5a
-
SHA512
bf839d319667f1592a11a60b0040e08235688638d3b4f3dd7283aad06ee5aa74d78d8615e30324c118d480f95ff849f72bbc56747bad41d5b61a8225cfa17e7d
-
SSDEEP
96:QvyLpZen/zpCawdFizqFDj3U/7VrAhyjIbuylpyjiZMjqP22UK+sgovxMa:jyLpi2qF67VrAhtuylpUiZMj2n+sppF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6268ed84a43fbcba5b61f232759292e8
Files
-
6268ed84a43fbcba5b61f232759292e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE