Behavioral task
behavioral1
Sample
6152f6ca0e113381d85075f6ca10c8b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6152f6ca0e113381d85075f6ca10c8b7.exe
Resource
win10v2004-20231215-en
General
-
Target
6152f6ca0e113381d85075f6ca10c8b7
-
Size
42KB
-
MD5
6152f6ca0e113381d85075f6ca10c8b7
-
SHA1
8df55622de02f6d8d835c35419b09e738bc4c56c
-
SHA256
c355f443686f605d547d86f888a5406238d3d68baa179bfb917d24e024936447
-
SHA512
e5b65d497a4411f0c25d5e5ea40d15da4b297c97701fc0b09b30e1e69834ef58e0c6035b08bdb7a46ddb183fa2b86ea7b2ddb306fdc32fecb4468cbdf272bf65
-
SSDEEP
768:nJ9jw/a22Jt0ZiIPUw9TClhTY+3LBdwKckxomQxr:nJEGuTTClhs+wjQHQx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6152f6ca0e113381d85075f6ca10c8b7
Files
-
6152f6ca0e113381d85075f6ca10c8b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE