Behavioral task
behavioral1
Sample
6f0edb0eab6e339ec04c93f78b61e93c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6f0edb0eab6e339ec04c93f78b61e93c.exe
Resource
win10v2004-20231215-en
General
-
Target
6f0edb0eab6e339ec04c93f78b61e93c
-
Size
30KB
-
MD5
6f0edb0eab6e339ec04c93f78b61e93c
-
SHA1
e4f9ba3a99b57526ca199d3739be012d15d8ff4f
-
SHA256
b2f99c9629a8b706a7dd4b74ccb6b2a8f02069431a783abbab50732e4b2c5eca
-
SHA512
47d1752dc2206c37e0a13c7c29c9ef72fb1c5814b5577fe2715ee10ced6ac0ca9765ed49d817c0d3b3e4378bfa1f1211a190b9c4ad1ef9fc374291165ba49620
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFKL:SKcR4mjD9r823FQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f0edb0eab6e339ec04c93f78b61e93c
Files
-
6f0edb0eab6e339ec04c93f78b61e93c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE