Behavioral task
behavioral1
Sample
6e0928c399923167516abec409b0f0fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e0928c399923167516abec409b0f0fc.exe
Resource
win10v2004-20231222-en
General
-
Target
6e0928c399923167516abec409b0f0fc.bin
-
Size
1003KB
-
MD5
6e0928c399923167516abec409b0f0fc
-
SHA1
37f4913fe2a06c7282b25cdd4d4eefcfd8b01f0a
-
SHA256
5bb07327638948a7be3dca95492254688324f5a92c3195d8b3e032880c619d69
-
SHA512
ade8ff23aecdb92420081eb61e6e3ec5837c18320b580cb9a0d194f4629e4c171db54f185b29483aa5e163f2739e7fc4e47249d177eb146b83bf20d3c84a527b
-
SSDEEP
12288:XdMkwkib5hQULwF8uO+h0d2m+sZnB6RBHvCM/RrrQmfCeCpLHkEAyj5OS6tpne5E:f054ue01dB1UnNCPHke5gEgKjwnS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e0928c399923167516abec409b0f0fc.bin
Files
-
6e0928c399923167516abec409b0f0fc.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE