Behavioral task
behavioral1
Sample
6b9cf930a4d7c63d947e557e67884a4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b9cf930a4d7c63d947e557e67884a4c.exe
Resource
win10v2004-20231215-en
General
-
Target
6b9cf930a4d7c63d947e557e67884a4c
-
Size
1019KB
-
MD5
6b9cf930a4d7c63d947e557e67884a4c
-
SHA1
001a5c0ae9fb68a5716a44fff47a8b12fab938ab
-
SHA256
cf2a7b2789a818f915fa0fd52f8f62eb7e57a9b51deddb2b6edcd8e671633618
-
SHA512
a5223a42780382b6290721f9492e84714e78cf1e4f8ca51e1c7dfbc088ab4f19b88508b84dba8fcbb0c996a93e5577f3ea44f39ca014adb026d0bbbb697bdea7
-
SSDEEP
24576:16WVT6WMaQwV6KSiWQm5ZZBLvcfpHUOLHoQ614Gh:16W4WvE/v5lLEfpHUOboQPGh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b9cf930a4d7c63d947e557e67884a4c
Files
-
6b9cf930a4d7c63d947e557e67884a4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 652KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE