Behavioral task
behavioral1
Sample
6fcfa3bc2c89a29a5222014654539cc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fcfa3bc2c89a29a5222014654539cc7.exe
Resource
win10v2004-20231215-en
General
-
Target
6fcfa3bc2c89a29a5222014654539cc7
-
Size
187KB
-
MD5
6fcfa3bc2c89a29a5222014654539cc7
-
SHA1
5cc99e3b5dc8800a50f6d018cd5b750fbe57e7a4
-
SHA256
e1d9656884517bf9070ebcd750f39ee13678edfea511c502c4fa16c251d872ec
-
SHA512
eb06f68cd5f8fb5147355969b268afa950a9d2d1a78ef63bc6289e7f06975cbae4ffa7911a9453f510d18e3f1b86fc9a468a38863bc6c6b0e7d10a293052c4c2
-
SSDEEP
3072:xMdwyqc94t3PQg9FZ6dssQbAkBIlxl+9Qcof9WSuo/AB0f+EiQ/SdJKSq2k+CHxj:xMdp++gV65MAksAGcof9LuZBcadDjk+G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fcfa3bc2c89a29a5222014654539cc7
Files
-
6fcfa3bc2c89a29a5222014654539cc7.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE