Behavioral task
behavioral1
Sample
6626dc7129da9ad5bce16a61c9a110c5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6626dc7129da9ad5bce16a61c9a110c5.exe
Resource
win10v2004-20231215-en
General
-
Target
6626dc7129da9ad5bce16a61c9a110c5
-
Size
2.6MB
-
MD5
6626dc7129da9ad5bce16a61c9a110c5
-
SHA1
66bbe95e0a941467541be9567f9614cb0dea7f92
-
SHA256
54138101f7b07b6930a04b137a7ce01aafd65c634d7a6ab06022d5b62f85b8df
-
SHA512
99d17e30996ab34b6c825ae239803de34c8ed5996e9b1834556f28a42d96c0bbe7a1fa0a245bb7e0c3b3c58fec26a4e7b56201a7bbae2263a81afe19dc9c1667
-
SSDEEP
49152:HvxDIKtkcPNR/BtmiSDBtFEU/1o9lgigemnxjvuBRYay3:pDtNB7QNKA3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6626dc7129da9ad5bce16a61c9a110c5
Files
-
6626dc7129da9ad5bce16a61c9a110c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE