Behavioral task
behavioral1
Sample
6b276b00633d7eb88ff566a93a16869a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b276b00633d7eb88ff566a93a16869a.exe
Resource
win10v2004-20231215-en
General
-
Target
6b276b00633d7eb88ff566a93a16869a
-
Size
119KB
-
MD5
6b276b00633d7eb88ff566a93a16869a
-
SHA1
18727098d61298b620bc66aa2b6240ab791fd213
-
SHA256
222acbd8ae419216ebbdb7b2fa304908a460e9e0bef54b5b3cd40571de2662e5
-
SHA512
64537f1c57ad7c9ea3affce2cda26eb885c2e2f06a7932a09a8ec6c7c9a81b8d05609cd5b53c30745947226f00e040bc8576f5a45ab6b8f1f54a75942f1d0b0b
-
SSDEEP
3072:SKcWmjRrz3MdPPgtZ0uSP+TbszWiL9wYqhSA9KEDVN:hGMdPPOqjPWWwnhoGX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b276b00633d7eb88ff566a93a16869a
Files
-
6b276b00633d7eb88ff566a93a16869a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE