Behavioral task
behavioral1
Sample
6cc9f5565fc9fda94b0be6843d7841c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6cc9f5565fc9fda94b0be6843d7841c3.exe
Resource
win10v2004-20231215-en
General
-
Target
6cc9f5565fc9fda94b0be6843d7841c3
-
Size
234KB
-
MD5
6cc9f5565fc9fda94b0be6843d7841c3
-
SHA1
4ef8041d4ca82815b98a1e4c4fec8d609c035fb8
-
SHA256
f8ac63011a0daadad90abf8338ebdfbca29339f39dfbafd0cc5ff530025a8ce0
-
SHA512
411fef33ab2ad1f4259b0d11832b53f26250b496165e928cf20c0fd5037a47dc9854e3081b842b49b472ed831c00cd110ab513902881cacf1822caef7d8d1529
-
SSDEEP
6144:U8g4kTA6Jb5zg564Pa8bmiaqxPSloBHINRYELBycY+B+:VQTJb5/4Pa8FasmEDELBU+B+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cc9f5565fc9fda94b0be6843d7841c3
Files
-
6cc9f5565fc9fda94b0be6843d7841c3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE