Behavioral task
behavioral1
Sample
6824d7543ecf8e8bad198be26f8c6d8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6824d7543ecf8e8bad198be26f8c6d8f.exe
Resource
win10v2004-20231222-en
General
-
Target
6824d7543ecf8e8bad198be26f8c6d8f
-
Size
327KB
-
MD5
6824d7543ecf8e8bad198be26f8c6d8f
-
SHA1
cc871f42fa2c518569aa2c0d249ce189a554b7c2
-
SHA256
f8ccb36df10b2d6a3a15befcaf367a8d0b53f1ef913b8fef1334d570c28a3dc2
-
SHA512
90e50673481be88be661ba3df72c4e95a9c679516fed877b5fd1f0d1cd7678129861673aabf2ca158d0d7ce56f8300a76637fe14bdb1fbe2a66a00e8c2923387
-
SSDEEP
6144:96+xt06fjuCfv/r8CdBYrabgqj6PJBhHyZf3kR0qLO7YdIqZqZRhHMHd1:Mg067uE3r8C4abgqjSJBhkPkRVzqZvH+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6824d7543ecf8e8bad198be26f8c6d8f
Files
-
6824d7543ecf8e8bad198be26f8c6d8f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE