Behavioral task
behavioral1
Sample
6fffe3272e942190a4483e7fbcd16f72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fffe3272e942190a4483e7fbcd16f72.exe
Resource
win10v2004-20231215-en
General
-
Target
6fffe3272e942190a4483e7fbcd16f72
-
Size
11.0MB
-
MD5
6fffe3272e942190a4483e7fbcd16f72
-
SHA1
e24f0f4b5bbbbc81f4d8b9a964a6342902fe28cd
-
SHA256
b7810c46d82b0ee7a3c3dc7e202a634a60346aba27e1775d1ac5f7757a2103b3
-
SHA512
f4cff9a8f6a9bc7e27a1d8f6afd95bc93a0395797bddfba9befd9b1c20906f7d8b972b4d229772300f9fe7a34787f5fc3debcc809e804abf0e1de6bf37f7d5e6
-
SSDEEP
98304:wYdNoev75BMkI35mCckFR+vicS43M239Tw8jzDtLB335mCckFR+vicS43:fvoeDHXg33FR+6cky5j9LL33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fffe3272e942190a4483e7fbcd16f72
Files
-
6fffe3272e942190a4483e7fbcd16f72.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE