Behavioral task
behavioral1
Sample
6fa6116e249cc74ee3cc162de3fcfe87.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fa6116e249cc74ee3cc162de3fcfe87.exe
Resource
win10v2004-20231215-en
General
-
Target
6fa6116e249cc74ee3cc162de3fcfe87
-
Size
133KB
-
MD5
6fa6116e249cc74ee3cc162de3fcfe87
-
SHA1
8c6783f8ee339b67bfeb3b3c25cf5209f534ae9e
-
SHA256
66736b7bad663463805bcbe8bfdd81ffbdf99ce0de89da4ad579a570c4a9f83e
-
SHA512
cd8b06eba228775d104c33983d1ebf9dbce8bf4f605a5a77b2abd1731d9e2419451981bcd79f756d872569b7395d3081bd1e3e69b854f89df8aa98fa3dc35deb
-
SSDEEP
3072:+C7RJlUXtCG2eO+P8n6bu6UPj5O2PuXz+vl8nQ:+ARJUs+knvRFOJzsl8nQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fa6116e249cc74ee3cc162de3fcfe87
Files
-
6fa6116e249cc74ee3cc162de3fcfe87.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE