Behavioral task
behavioral1
Sample
b6e6542495dedf19c062383f59f82dd2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6e6542495dedf19c062383f59f82dd2.exe
Resource
win10v2004-20240226-en
General
-
Target
b6e6542495dedf19c062383f59f82dd2
-
Size
1003KB
-
MD5
b6e6542495dedf19c062383f59f82dd2
-
SHA1
df4846bcf1a5909a09a1576e70033bd4985733ef
-
SHA256
590f71a7af313685c7ed5ebae38ad9bf0d12e1f9fcb8741bdfdfe977e4f1feff
-
SHA512
108e44ba6e9de7befd8a9a206c91669e9527eb619d8303a0984dbbbfa52cc023219b14ba874a4703e8d8fb33d478e8e6bf7c94b84bc900e24568e02aa6dd82e6
-
SSDEEP
24576:N0dF2ZM+nu0KiV+b9+9KT22cjukL2CDYibq6/yqLNaF:N0dFOXnu03V+b9+9Ka2cakLz0ibq6yqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6e6542495dedf19c062383f59f82dd2
Files
-
b6e6542495dedf19c062383f59f82dd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE