Behavioral task
behavioral1
Sample
6e47e0b14f64ee563598926c79b9cafb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6e47e0b14f64ee563598926c79b9cafb.exe
Resource
win10v2004-20231222-en
General
-
Target
6e47e0b14f64ee563598926c79b9cafb
-
Size
54KB
-
MD5
6e47e0b14f64ee563598926c79b9cafb
-
SHA1
7f8bb773540cd398e8b50cebbea26928eae3b66c
-
SHA256
e09f9c64adbcfb3a65d2e35ae0ca966a190142a7f9654e753cbfca9e973bd6be
-
SHA512
45ecc9f03e9414cefe8257b4100917c7985413e565bfd5452dbe7f3861a0ddb2461f36dce6ab153e5853b170b6ef85b5cd3846ebd69ec79b3d3b715c2b3d0b65
-
SSDEEP
1536:5qX5uY0cc736mnVbsnmpxOZjVuhVQ5RZED+FkUndz84K:54g7KmnVb+oO1VuhOR6KFnz84K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e47e0b14f64ee563598926c79b9cafb
Files
-
6e47e0b14f64ee563598926c79b9cafb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE