Behavioral task
behavioral1
Sample
6734806a44ec055231f01e3b5903e8b7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6734806a44ec055231f01e3b5903e8b7.exe
Resource
win10v2004-20231215-en
General
-
Target
6734806a44ec055231f01e3b5903e8b7
-
Size
981KB
-
MD5
6734806a44ec055231f01e3b5903e8b7
-
SHA1
bf277c7a130468f6ec067cbaee96d513b7ba1c04
-
SHA256
2b86bdc97a8b58e4a0fe6e2b6fe63428e105be6323faad99c45a4ff90401a2ad
-
SHA512
eb4946468bb6a4de4a51c1c6424e7f015a671d10181b917c69f6e0a8d337538ca3aa5d77d51d26d04b26ecf5c6a67d073720b1e969c5f3091c614adf142d0e71
-
SSDEEP
24576:Bb4AOcpJiHHiesNAmN4We3OAsb8DM6yCt3UZCNDNlEed:BOcpJi8KlWd3bCFtE0NlE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6734806a44ec055231f01e3b5903e8b7
Files
-
6734806a44ec055231f01e3b5903e8b7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 974KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE