Behavioral task
behavioral1
Sample
6787ec228f2833843ddd14237d7cecb3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6787ec228f2833843ddd14237d7cecb3.exe
Resource
win10v2004-20231215-en
General
-
Target
6787ec228f2833843ddd14237d7cecb3
-
Size
302KB
-
MD5
6787ec228f2833843ddd14237d7cecb3
-
SHA1
cefce1ac2b5b394b0add611d615fdabef16b318a
-
SHA256
5af8b7771ba70ba32d6f3a4b99bfd321167f102f6e61018ef164569d6a2b41e4
-
SHA512
d8db26b08c6201109f0fad6d519cbc4f6a2570431fc1f0e3c4fe1870c4af7ee306ac3cd3a128a74480797ec566e2ca78b6e385dd296cb58c3de1ceaeaba7a7a9
-
SSDEEP
6144:QQFFNQfPYIjHcqezzLeqfjbNPC0ZO6M7IfmQ:LFQHWJfj5jMgfm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6787ec228f2833843ddd14237d7cecb3
Files
-
6787ec228f2833843ddd14237d7cecb3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE