Behavioral task
behavioral1
Sample
c6391209d397634037a53ccfc6c949e8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6391209d397634037a53ccfc6c949e8.exe
Resource
win10v2004-20240226-en
General
-
Target
c6391209d397634037a53ccfc6c949e8
-
Size
234KB
-
MD5
c6391209d397634037a53ccfc6c949e8
-
SHA1
c9857f42a6293c2533761436a663ea9f16445969
-
SHA256
cb66d6d4d865f37ead9bfbe2d17e56d1f82a936b9037d9a409522673bc6f23e9
-
SHA512
5036205498b0525b4aeb8eb1a9a5adb7152ac1f33ce514e051690665d5344b200188f3130d32a9ad6e94e15c1668181ed8724442f7c9e542519dd2e5c63a1299
-
SSDEEP
6144:df4+HXXQMFGQ40B0jkW+BzNSoFyWs+ziMSk4p:d3HXVxwk5YoFyWsv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6391209d397634037a53ccfc6c949e8
Files
-
c6391209d397634037a53ccfc6c949e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE