Behavioral task
behavioral1
Sample
6a7e00988dec973623718843232e7779.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a7e00988dec973623718843232e7779.exe
Resource
win10v2004-20231222-en
General
-
Target
6a7e00988dec973623718843232e7779
-
Size
159KB
-
MD5
6a7e00988dec973623718843232e7779
-
SHA1
f06a200a7b673f674257bf8d384507a7c4bb073d
-
SHA256
dca471fbb940a5e89d331fd56f1aec02f27da5a648a7d3983b605bb750d6d8b1
-
SHA512
674446ffcc913796367457e2c526998f27b7048b7df6363e734c075a3121672430de9a92a5a5e9b5378dd42330abca542d198ee5173ea8f5b3a038cd51e4deeb
-
SSDEEP
3072:09YWGTHibkxMywJ+91Ra+Tb0b2zekN9TMx67s3zqeF7qsm:0CzEn+9aybB5NG4MWgqZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a7e00988dec973623718843232e7779
Files
-
6a7e00988dec973623718843232e7779.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE