Behavioral task
behavioral1
Sample
6677d1266f48ae65c7e16f46dcd88bd2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6677d1266f48ae65c7e16f46dcd88bd2.exe
Resource
win10v2004-20231215-en
General
-
Target
6677d1266f48ae65c7e16f46dcd88bd2
-
Size
2.6MB
-
MD5
6677d1266f48ae65c7e16f46dcd88bd2
-
SHA1
11ac0db24eec6d18d06754afc9ebc622764b4aad
-
SHA256
6379e17a1547304e7ea63f3803b656e9b3339e09e83a98a15372a4b3d4063a5e
-
SHA512
9a8999b3bc545e163e523237d8203b4e60c0d076988a384000ee55d49f8066dd4d0d4775f40cf5d9b8c6a58bc09eff47307deaa1a1366ad3854231e1141ee685
-
SSDEEP
49152:IMhWE1CoiY2oiC/P8ciGaWEahJbEFpay3:of1lPz3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6677d1266f48ae65c7e16f46dcd88bd2
Files
-
6677d1266f48ae65c7e16f46dcd88bd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE