Behavioral task
behavioral1
Sample
6f82af0f05fdf8e17b3a9021add05ca1.exe
Resource
win7-20231215-en
General
-
Target
6f82af0f05fdf8e17b3a9021add05ca1
-
Size
598KB
-
MD5
6f82af0f05fdf8e17b3a9021add05ca1
-
SHA1
6898d1e4b26da21d95b2e34374a90a77dd095262
-
SHA256
3609fcac8d51fb0aa1dc593b777a56beeadfbfd7155ef179750a616882d79b27
-
SHA512
08e0fdfa3577944f7162a57ed797f7a5d351bba1766b9575f1d10c24b46c3b0dad47cba98f2ca3875fd0485afd76a640aae087eb7ffaa7288807f83443357bfe
-
SSDEEP
12288:3Jz0TrCqVM8UoAs4fg4xbFs9lLaAgev1pS4aCkFdqri9VWQMkbx/yMFqNfuN:RirCkUo8fLBqmze9pS4a7qu9VdMkbIMZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f82af0f05fdf8e17b3a9021add05ca1
Files
-
6f82af0f05fdf8e17b3a9021add05ca1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE