Behavioral task
behavioral1
Sample
6107a89efdc0b4b8784498767be445a0.exe
Resource
win7-20231215-en
General
-
Target
6107a89efdc0b4b8784498767be445a0
-
Size
176KB
-
MD5
6107a89efdc0b4b8784498767be445a0
-
SHA1
c13991263f27d7d0a455fb4ee93b0d69cb8407d6
-
SHA256
2ecdf8275b73345065a685558f8d6efca8a5228b9fd63e0b06f1ad0cb956a241
-
SHA512
0b6c6c3b6a9c8cfdedaefdd654b7f251749ae80c75176318663eb522fab185a9f2c2b954f063acb8c40fee8e385a14ac6a232440575a4c58a59f32f4807d7356
-
SSDEEP
3072:jK77uCxavYJwmq9RO71wm6PuYh4y9z5TX0nyKf6nI9n5bLoshoHmP5H:OuCxafmgs71mxVBX0hf6C5bLg2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6107a89efdc0b4b8784498767be445a0
Files
-
6107a89efdc0b4b8784498767be445a0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE