Behavioral task
behavioral1
Sample
6f93d83362f7318dfa07a5378b69fbab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6f93d83362f7318dfa07a5378b69fbab.exe
Resource
win10v2004-20231215-en
General
-
Target
6f93d83362f7318dfa07a5378b69fbab
-
Size
1.0MB
-
MD5
6f93d83362f7318dfa07a5378b69fbab
-
SHA1
3ce80a4798d6cf396279c62299c04eb8dc593d5f
-
SHA256
e843608368b2de4e86997c1f3d7e19b8dc27813925d2d4f9a6626ffa441b3024
-
SHA512
5b50cabe8ca6a47358968872b92677fad8d6057903851eb36fd51dc610d4aae2e00efbea1f9db47c53d39deabb95bf6a5291c017c9b0183520733423878c4f80
-
SSDEEP
12288:ehe8ee0zPOg9DMOxnQR0H8U8dQ5kdu2BKhtD9M99zMuv19bxXRQ8tOnA20FDGmVt:il0d91xcUjaz8htS7v1nlz20xq6D9ei
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f93d83362f7318dfa07a5378b69fbab
Files
-
6f93d83362f7318dfa07a5378b69fbab.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE