Behavioral task
behavioral1
Sample
c6ff9537d513d16e1a40fe7dd12380a7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6ff9537d513d16e1a40fe7dd12380a7.exe
Resource
win10v2004-20240226-en
General
-
Target
c6ff9537d513d16e1a40fe7dd12380a7
-
Size
1.1MB
-
MD5
c6ff9537d513d16e1a40fe7dd12380a7
-
SHA1
301e68e46934052715b9a80101395d50851a910c
-
SHA256
1802fb0cc440cbf066732952912e6fb786abe77dca73d7150b0e528363c0e136
-
SHA512
645a1e18326944bdf5dd68d8372d3d0cd82eeff9df33379dbc6c7770f376d8d33d68be4413b5ecf56ace3358707ad2f90599e0ba9417a730d3357030992c954d
-
SSDEEP
24576:/PW1bxK3jgnKVfXF46oj/QcSmqgyvEpYbiJ5UMo2aBLdZyW:/PMucnkf67j/QcSmq0Su5UM2L2W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6ff9537d513d16e1a40fe7dd12380a7
Files
-
c6ff9537d513d16e1a40fe7dd12380a7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE