Behavioral task
behavioral1
Sample
6a9780de17ee5abdb3a4d52aff67004d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6a9780de17ee5abdb3a4d52aff67004d.exe
Resource
win10v2004-20231215-en
General
-
Target
6a9780de17ee5abdb3a4d52aff67004d
-
Size
123KB
-
MD5
6a9780de17ee5abdb3a4d52aff67004d
-
SHA1
aaa046681c347b231136d3b841643a1b3d335eb2
-
SHA256
13f22fb512819cf674768f29ca09db55ccd9249c490fcaae725b5772fbc4a97d
-
SHA512
ff22dad9d8393c68d1613e26ec59301e23973fd424356aae4725c25b7701f282353109fdb1c931207222e61fedf5fb1cba268c2eb1f5dd7cac486ebd70fe9d0f
-
SSDEEP
3072:nb9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:n5SbwRK4CTbd9W7Dan7o0TBVkEPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9780de17ee5abdb3a4d52aff67004d
Files
-
6a9780de17ee5abdb3a4d52aff67004d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE