Behavioral task
behavioral1
Sample
6508324544128169a23bbc2ed236fa23.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6508324544128169a23bbc2ed236fa23.exe
Resource
win10v2004-20231215-en
General
-
Target
6508324544128169a23bbc2ed236fa23
-
Size
1.8MB
-
MD5
6508324544128169a23bbc2ed236fa23
-
SHA1
163a3f571fa578015317afce87fd4f47622faa1e
-
SHA256
24341e14880f4246095dfe03405aad1eb970b1f6ba5f9f2c7e93b9436c5c1d02
-
SHA512
e11f2881bf5a36055a52e00f98fa6fe71a315e0f62e7c76e20de8bad9f128ba7acc8879a7fe50b1aab05d3048d6f95e22a1b2513733e443ff54ad6e5c8a851c8
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqK:SCqm2Jpr0nNM7Dus7Nxz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6508324544128169a23bbc2ed236fa23
Files
-
6508324544128169a23bbc2ed236fa23.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE