Behavioral task
behavioral1
Sample
6021055377da0a75c5cfdb8919ff1c87.exe
Resource
win7-20231215-en
General
-
Target
6021055377da0a75c5cfdb8919ff1c87.exe
-
Size
402KB
-
MD5
6021055377da0a75c5cfdb8919ff1c87
-
SHA1
5db56410fe18b8b9d28b8fe9e8e3694776303c7b
-
SHA256
b0f0b2d4c7a1222509025d3cf636a53753069bdf280dddf2e1aa2053be517e36
-
SHA512
ec58c0642fd7e2e5eec5879ff5362cd514d2d5454aa5f9dbd54c43d8f88e3a1cd9a018809764e9682a464b15c7b7bea412dbcfa591f6578d0c0e102c6f23a0e5
-
SSDEEP
6144:6maKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgi:DSmLAuEY71fviagATFmebVQDcYcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6021055377da0a75c5cfdb8919ff1c87.exe
Files
-
6021055377da0a75c5cfdb8919ff1c87.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE