Behavioral task
behavioral1
Sample
6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787.exe
Resource
win10v2004-20240226-en
General
-
Target
6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787
-
Size
459KB
-
MD5
7ecd10529e9fb4ca8034ebeac291f7a7
-
SHA1
73c15143d97d0ec33dec64559e05111868a1d577
-
SHA256
6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787
-
SHA512
6b7f015a0cfc3b8ca7f79ae503ac943502d592d33e1427e1cd3e166ffe09ea281bb898dd08b5a704aace3e4a9a9c40cd1a3278e4a89c13144e54ce69b1e58139
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXUzQIlJZlHrx:ZtXMzqrllX7XwfEIlJZV9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787
Files
-
6e7e04bcdb432052881ebb73dc50ff1cd2525455a9246af859d27fd590eff787.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE