Behavioral task
behavioral1
Sample
6666bd2d13471383d519373f4c8f9704.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6666bd2d13471383d519373f4c8f9704.exe
Resource
win10v2004-20231215-en
General
-
Target
6666bd2d13471383d519373f4c8f9704
-
Size
854KB
-
MD5
6666bd2d13471383d519373f4c8f9704
-
SHA1
c284404141fc9e6f4f907cc1b03f674312227418
-
SHA256
bbef6fa7c85592e91e6d07b34a82f4c2bb2260061fe82f0cf8ba6aed13e5c83f
-
SHA512
6ac8e5542df26b4b25aaa6d0a2cf19cad3c7e85ecfa72dbdc97f13d2916e26e5ceb16e2ad61f25eeb962f6b050a0edc2163d23b215b4e9f674a678ce17ae34a6
-
SSDEEP
12288:sr/tRZf7cw58UcDNwByTCO9TGpchCs5roAUfu6/lxCDxlB9v0G4uaPVHY+hvaRx/:+jbwD2y5IxsCfZHCDxFcxpPV4+Ng
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6666bd2d13471383d519373f4c8f9704
Files
-
6666bd2d13471383d519373f4c8f9704.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE