Behavioral task
behavioral1
Sample
6e761fcad491e203fdee1839f6590644.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e761fcad491e203fdee1839f6590644.exe
Resource
win10v2004-20231215-en
General
-
Target
6e761fcad491e203fdee1839f6590644
-
Size
372KB
-
MD5
6e761fcad491e203fdee1839f6590644
-
SHA1
57048c1c3695fcd87b90521c9947955dec63d000
-
SHA256
3fc7e8eab821b759990fbcb68b5fcb43637f96d2cd81005a3f57af98c8023dad
-
SHA512
c6c7679be4a4228f3f1a7bc08eaa25309e505b9f03e77ab3d13efe58dca3e4a9f1079deb223e2ee9ab37f35104840e1e227dfa1104617a28f3dc30b1bcbb763e
-
SSDEEP
6144:g9p6wUkWcYkKh5q31hBLtMR/iQa4Iy1VSox5vtbr2GHFZMeXn/oSaTWnXf9ae90f:g90g8ALqlrkWhvNr2GlZMe3/oSaTWnPL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e761fcad491e203fdee1839f6590644
Files
-
6e761fcad491e203fdee1839f6590644.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 700KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE