Behavioral task
behavioral1
Sample
c6cb899a682fbf0bce8b69c599ae540a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c6cb899a682fbf0bce8b69c599ae540a.exe
Resource
win10v2004-20231222-en
General
-
Target
c6cb899a682fbf0bce8b69c599ae540a.exe
-
Size
69KB
-
MD5
c6cb899a682fbf0bce8b69c599ae540a
-
SHA1
cc6ad3c1e608317093ed6be3b99a5d7ab6feff41
-
SHA256
75fd24502fc1e463f536fb6a0d732bca531fd626ef5c178c2cb7672c4bd95fbb
-
SHA512
50e1b052807bf887b12d9d21f378bc660f32e26bceecbd572f2e4533b062ecddc943ef69b7af24019d95f5c6fa67340383232b3e9ebf96652f7aa48689138682
-
SSDEEP
1536:vF2oVAXMiVzYjeTXjB0Dxyn3fMc+b3+38FY/ankx7AMG4L+:v/VmmjemDYvxc+MCykx73G4L+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6cb899a682fbf0bce8b69c599ae540a.exe
Files
-
c6cb899a682fbf0bce8b69c599ae540a.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE