Behavioral task
behavioral1
Sample
6878c23d8a7431914aac4a961e550150.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6878c23d8a7431914aac4a961e550150.exe
Resource
win10v2004-20231215-en
General
-
Target
6878c23d8a7431914aac4a961e550150
-
Size
7.6MB
-
MD5
6878c23d8a7431914aac4a961e550150
-
SHA1
8488e78a577a02799753d4336f742c803d302fe6
-
SHA256
c9c919df1ba67270ce09832bdc867fe8f7058ce5877dc642b23fe15f56f0298d
-
SHA512
b42b51a4e614b73a4269d59c74afe4e55eed7103577aa0b00b7725c4317bb60d2b3db378d44f09daa49132adb09a4cc53bcec6be425bc035c890e1b79538e6d6
-
SSDEEP
98304:jjBxcO4EYTjxHKxtLK3BDhtvS0Hpe4zbpaAKQkroGIFK8mTk:jjBxcO4jjFKIBnvjeApaAvktVo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6878c23d8a7431914aac4a961e550150
Files
-
6878c23d8a7431914aac4a961e550150.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE