Behavioral task
behavioral1
Sample
b6d943c5413409c5a9a4f09b663cd1cb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6d943c5413409c5a9a4f09b663cd1cb.exe
Resource
win10v2004-20240226-en
General
-
Target
b6d943c5413409c5a9a4f09b663cd1cb
-
Size
1.5MB
-
MD5
b6d943c5413409c5a9a4f09b663cd1cb
-
SHA1
4ac6863365e2c1929390ea0bbe4d468d63261ed0
-
SHA256
0c9918479c3a1acc7a4a6760bc55894b3b7090b07a6fae5b9583a459428adc22
-
SHA512
2b4e1776f6078111f776d7b4166c51b9b70c8d29f4c59477d16d137600ce321454301e8d9e220641bfbd3441d951517e6ecb6ea75986ffa92abeead1bdbccef7
-
SSDEEP
24576:xZ6WKoaudR4f/UTwQLyhWveB+4goGQoadai7D3uITjIFOxo53ApIj:xZ6WKoaudR4fsTwQLyhWveB+4goGQ7aX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d943c5413409c5a9a4f09b663cd1cb
Files
-
b6d943c5413409c5a9a4f09b663cd1cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE