Behavioral task
behavioral1
Sample
6f6a83b3bfcceb779eb7cd47e53e8bb1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6f6a83b3bfcceb779eb7cd47e53e8bb1.exe
Resource
win10v2004-20231215-en
General
-
Target
6f6a83b3bfcceb779eb7cd47e53e8bb1
-
Size
148KB
-
MD5
6f6a83b3bfcceb779eb7cd47e53e8bb1
-
SHA1
7ebca8794ef698d2ac66ce63737595df1be0b67f
-
SHA256
e97d674740f9699a7fd52dd6da8533f6abdaf22261e99198b68c78b6c756aa6c
-
SHA512
c6547b21fe20c1e9f4f5a11e0ee996f2a4c28fc3d92d8e0fe6d86cf0d88488fa43efd90fd3debc95abdbdb3ef2d3262e9828e04db1a3597bb4305657c01be3e0
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3PdnBMKD5PN1gi6QhAltxpZc85hCe0i9:hGyGPdCWhNjja7nZc85hwi9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f6a83b3bfcceb779eb7cd47e53e8bb1
Files
-
6f6a83b3bfcceb779eb7cd47e53e8bb1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE