Behavioral task
behavioral1
Sample
06b4248cf4db4818fe69af1f8fec19c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06b4248cf4db4818fe69af1f8fec19c3.exe
Resource
win10v2004-20231215-en
General
-
Target
06b4248cf4db4818fe69af1f8fec19c3
-
Size
1.9MB
-
MD5
06b4248cf4db4818fe69af1f8fec19c3
-
SHA1
9bc662923899b396a9225285bd670e19bc50e925
-
SHA256
109dd487611e201ba9148deb965967eac001cf7748b276e36129d4e5e34d5134
-
SHA512
0052a754495d94fd4a12c4419a0f3fa80657e51bcbc9ed7accd0d712cb18a215d3c5d9b94af7697412f12e9a9b6dbb88c270f482b2614766c289b90c2009aa19
-
SSDEEP
49152:h3PCR1f8+ozSjvyshxtMr7qyw1EI2BvEGWT3segCgvZLwFv:7+ozSjvyexWFwOo13sPGFv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06b4248cf4db4818fe69af1f8fec19c3
Files
-
06b4248cf4db4818fe69af1f8fec19c3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE