Behavioral task
behavioral1
Sample
6839cecafae83d27ae95cfaab11e0c23.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6839cecafae83d27ae95cfaab11e0c23.exe
Resource
win10v2004-20231215-en
General
-
Target
6839cecafae83d27ae95cfaab11e0c23
-
Size
35KB
-
MD5
6839cecafae83d27ae95cfaab11e0c23
-
SHA1
ed1b9710cfe8c8ff4c080e5be79fa74f4128e24c
-
SHA256
30b96330c53f2fd2b62b0f9a8dfcb550f03f226f01278627bccd57b6abf329fb
-
SHA512
e0e9e1ff5cd711fd7cd5c77948731fa00abfa15e15e95ecc6c0e7e1352f2557483ffad015356db8d5c97174ec69f3d61dcf182a6b626014c898b2a7777d7567e
-
SSDEEP
192:zIHUTix8pblpJISTb0oRAvNUTix8pblp:cHWD5ZndWNWD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6839cecafae83d27ae95cfaab11e0c23
Files
-
6839cecafae83d27ae95cfaab11e0c23.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ