Behavioral task
behavioral1
Sample
06cb48b4dc5c28e7f6115b981860d3a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06cb48b4dc5c28e7f6115b981860d3a2.exe
Resource
win10v2004-20231215-en
General
-
Target
06cb48b4dc5c28e7f6115b981860d3a2
-
Size
1.3MB
-
MD5
06cb48b4dc5c28e7f6115b981860d3a2
-
SHA1
4e237d921d091729ec454a67a8a50c4a4a79a4c3
-
SHA256
327358f8a98e95280f14d92d10e72139679ca31756738c07f85ef7a5c7043e3d
-
SHA512
28df8313ea313ddb57ab259fb580433aa830c4f2530fc76a5d743e11522318752a636cc08a33375189046e1f04807acbc2d0c1869fdc416188d5d0a9a3164849
-
SSDEEP
24576:IdZ4/pHtSCYA6QQXGsP6chhfnlIacChu29RZ+lCIpuUOSzGru7gvG:r5tSrXGsP6+JlIMhnPZ+XpdOSuu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06cb48b4dc5c28e7f6115b981860d3a2
Files
-
06cb48b4dc5c28e7f6115b981860d3a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE