Behavioral task
behavioral1
Sample
b6f65a8fc6a042fe376be83363fb5620.exe
Resource
win7-20240221-en
General
-
Target
b6f65a8fc6a042fe376be83363fb5620
-
Size
1.6MB
-
MD5
b6f65a8fc6a042fe376be83363fb5620
-
SHA1
935eb0f3975319a1e9d05629bdaddd1a0f93b8ce
-
SHA256
dae686d7d1782fa35ea14a28fd78bd74826414c8cb9206a0aa28eab93a416126
-
SHA512
940439426b853192c64b00c8eefe744e436868ae413a2dc8dc6b44914417e55d7eb0c459c308e5cb6315b2c74985073851720a3e2b0ac312812c6c2e5cf08bf3
-
SSDEEP
49152:cgHcsiQNgQ0Oe8xdL1w69equLGkktlF+PDJyf:cycsiQh0OFJ1wqBlF+P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6f65a8fc6a042fe376be83363fb5620
Files
-
b6f65a8fc6a042fe376be83363fb5620.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE