Behavioral task
behavioral1
Sample
c6ac031d103a8db91ea1255ef93a94d9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6ac031d103a8db91ea1255ef93a94d9.exe
Resource
win10v2004-20240226-en
General
-
Target
c6ac031d103a8db91ea1255ef93a94d9
-
Size
1003KB
-
MD5
c6ac031d103a8db91ea1255ef93a94d9
-
SHA1
9c51f0e128cc3492ef694fd71c63eebfdd65b735
-
SHA256
fba9c54fc0427f8c422b3146b6ce3810baf3b3b9ab5814caae712647a7b82929
-
SHA512
9a57128f6d7e025f71cbc8c9e3a9a0c87c95942ad3a9f0ef39907b1abb75def7af5fedf7f5cea31808418789e6ffbf57aff56c98aa89bad9d825531ccb583353
-
SSDEEP
24576:4tn7rHXMvMQhhIyX5gIxJUozFoFu1PoN:4tnfH8phhII5gIxqozFqu1C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6ac031d103a8db91ea1255ef93a94d9
Files
-
c6ac031d103a8db91ea1255ef93a94d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE