Behavioral task
behavioral1
Sample
b6797d907acf6b28273cabf661c1cc90.exe
Resource
win7-20240221-en
General
-
Target
b6797d907acf6b28273cabf661c1cc90
-
Size
87KB
-
MD5
b6797d907acf6b28273cabf661c1cc90
-
SHA1
cc822f15426b3891126c4d84a4fec05168a29f96
-
SHA256
43fb9b8753106e747577a6725fcb150efb4727eea177b1056d92507515155a04
-
SHA512
18b06f5d7411e4f71424140b00bd8dd362777a1e943cb831d07a10c47963521d1cc80cf5c2521dd0ea821a1507f837e1c213d533906dc7bb7b499d2fcf83acab
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy8q5kNJ8mGltIIgKsQRVUVMkvMaVhtD:xhOmTsF93UYfwC6GIoutqiJ8mqtbfUV/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6797d907acf6b28273cabf661c1cc90
Files
-
b6797d907acf6b28273cabf661c1cc90.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE