Behavioral task
behavioral1
Sample
c6f5e267822c196e439b01fc4abe493a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6f5e267822c196e439b01fc4abe493a.exe
Resource
win10v2004-20240226-en
General
-
Target
c6f5e267822c196e439b01fc4abe493a
-
Size
47KB
-
MD5
c6f5e267822c196e439b01fc4abe493a
-
SHA1
bc5d3d9f2c495a87662be94dc3380eed95267ce5
-
SHA256
2b91283bf447ca8d2f6ca825bd41059c4216a5433617e3507466a5a0e1afa653
-
SHA512
32e23060d7949efb61d89018b35533c4f1ab240d473e0b23c02cffa85c007c0c1f1aca64598b8c62d10fe1e4d2ad3e2bd9da1fed4120cb696ff564ec173f54fa
-
SSDEEP
768:C89vNf3y5XOE0cBNlgjW+4PWuJTat5q1Hx1JJVDm:99vl3y5XOE0GxWu8A5JI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6f5e267822c196e439b01fc4abe493a
Files
-
c6f5e267822c196e439b01fc4abe493a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 837B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE