Behavioral task
behavioral1
Sample
6a51eb651d3e83730992989711a3d30f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a51eb651d3e83730992989711a3d30f.exe
Resource
win10v2004-20231215-en
General
-
Target
6a51eb651d3e83730992989711a3d30f
-
Size
68KB
-
MD5
6a51eb651d3e83730992989711a3d30f
-
SHA1
1f2b013d39a812b304cd4a4ac11a046441cdf448
-
SHA256
3f024fb028fd82e49a6355233bce63d6605d720f815544af5cac57c12594d004
-
SHA512
ae7c9747df5ae75dfcd79dee812b044757406b18f77cb0a01d4e648f52c9abb0a51987d17660158863f276ec3a1a01d859b62fd4858b8e96b673893b875fb780
-
SSDEEP
768:A7b7P43372DR0QJz3TzIuZP7P3qPt3uLufvhX1H0mIJ5CxuK:qP4H7yR0O3TzIbeLuHCJR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a51eb651d3e83730992989711a3d30f
Files
-
6a51eb651d3e83730992989711a3d30f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iKV Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE