Behavioral task
behavioral1
Sample
6822d3af786f14724b13885fa07b606d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6822d3af786f14724b13885fa07b606d.exe
Resource
win10v2004-20231222-en
General
-
Target
6822d3af786f14724b13885fa07b606d
-
Size
2.3MB
-
MD5
6822d3af786f14724b13885fa07b606d
-
SHA1
5a5e9563a63fc404dbc49642911d37814a57fcc7
-
SHA256
47f9f4d3a73fed1ccb79e92d98edb3739b2d7d25f48e0ba1e0606c0269c39f3c
-
SHA512
e4eeba71faa0f252742d81e8e799d5c776d0bcaac8ed8e547d5699e9d2f7526ff0c4c4f44af19906330085519a5746c75671c5999fa18ccbb22f11210757edbd
-
SSDEEP
49152:rXvsCauuraeHgo0ahdS4h8sXqyPSjVCWuWV355FXw/+iuWV355FXw/+b4wCu+2GI:rXvsCatrFHgYT8mVP/ZEr+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6822d3af786f14724b13885fa07b606d
Files
-
6822d3af786f14724b13885fa07b606d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE