Behavioral task
behavioral1
Sample
6a6057cdd49fe21785501f5b84cde93a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a6057cdd49fe21785501f5b84cde93a.exe
Resource
win10v2004-20231222-en
General
-
Target
6a6057cdd49fe21785501f5b84cde93a
-
Size
153KB
-
MD5
6a6057cdd49fe21785501f5b84cde93a
-
SHA1
a69a4277b6bd687ce2f57fa5da3a6d79d4673796
-
SHA256
84268a4b6aaff5072c0c6caa7f48d06054cf16c641f433deed76ebf1c46de193
-
SHA512
fa8cdceb1a9c19f242b4a26c8275b92a54f58dc61cbfe2270ec6ac11285f423b750e953a45a86a34da36701bf4e1aa270503ed806be2b1d5f1de1aebad4f3df9
-
SSDEEP
1536:w8wudvENtioNg1VjZMHOaXJTc2RaKmnLHzG5KKRLJV1Hy703McBA2LrfLBKWeihn:FENtiokZMCCaJLHzUn6YzLQ9iYpiln
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6057cdd49fe21785501f5b84cde93a
Files
-
6a6057cdd49fe21785501f5b84cde93a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE