Behavioral task
behavioral1
Sample
6681a4ea44be123b518dc7c2349bec17.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6681a4ea44be123b518dc7c2349bec17.exe
Resource
win10v2004-20231215-en
General
-
Target
6681a4ea44be123b518dc7c2349bec17
-
Size
3.0MB
-
MD5
6681a4ea44be123b518dc7c2349bec17
-
SHA1
59ad8a7db1e1027d94a792ead1c60a6b8abbb255
-
SHA256
c6edc687cbda8cb7ea5d54313884ce11862f4b7639696bb2a4e97f1392727a4d
-
SHA512
7730e7022a1988e1bf354ad0ee1a39a559a370d130d7dea568e1ad3b645263c1ca682d59f8aad53bde391cf67fdb89364512113f50b8a5c09430be019d3192a0
-
SSDEEP
49152:E4s5NMTiZC+sxOcakLxi71kiJacakLKSQgGiiA8tSjOuk0cakLxi71kiJacakLj:Ts5NQ64Ocak9i7GiJacakWSQgGZTtSjp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6681a4ea44be123b518dc7c2349bec17
Files
-
6681a4ea44be123b518dc7c2349bec17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE