Behavioral task
behavioral1
Sample
6811eb34a7697faf15da18ab1498eed3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6811eb34a7697faf15da18ab1498eed3.exe
Resource
win10v2004-20231215-en
General
-
Target
6811eb34a7697faf15da18ab1498eed3
-
Size
2.7MB
-
MD5
6811eb34a7697faf15da18ab1498eed3
-
SHA1
45afbed01fb9390be395444acdfb44a18e7d1011
-
SHA256
0bcc6af6f37b62c40ece210ce02e0a523e9b7a0b070c58492fb054e1e882b680
-
SHA512
a0c8b01eef08d068b45c8b9e7fadca324f7994d21693d7524135eb65ced2701f3fb96e345460d2f5c8a2a08596fac354695f2e831a13197d97d61e429fa68382
-
SSDEEP
49152:/8vzTPMRdsYK83q6kx2njvlaF4R9l6ugkTXBNqKPaCM+slq7CO9aDWjDhoExjdfO:EvzTZYH33kx2jvceHlrTTXuKTM+s8OaI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6811eb34a7697faf15da18ab1498eed3
Files
-
6811eb34a7697faf15da18ab1498eed3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE