Behavioral task
behavioral1
Sample
6660aa3ed53471b940eba92794a4ef2d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6660aa3ed53471b940eba92794a4ef2d.exe
Resource
win10v2004-20231222-en
General
-
Target
6660aa3ed53471b940eba92794a4ef2d
-
Size
302KB
-
MD5
6660aa3ed53471b940eba92794a4ef2d
-
SHA1
be4c4d53adac94ada4f2a24ac83237bed984904b
-
SHA256
b7270ba7c4a521d7946efd798a47a9788f6158fa3d085853246b3e0e9756b390
-
SHA512
fb8a66221148af4c05197c5841b920c142c6e9b63d5a9f53cbe93557df6e47528f4271e84cff7c2347379889a247cc72e9e98dcb1e5b1cd631e600ab682a83fa
-
SSDEEP
6144:IS3koBbh3SWc/63GuXpdHfVQ8SGce9QdmQ:j9kWI63GuXpt+vXdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6660aa3ed53471b940eba92794a4ef2d
Files
-
6660aa3ed53471b940eba92794a4ef2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE