Behavioral task
behavioral1
Sample
c6c043ea9a2bd100f0081572ece1e652.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6c043ea9a2bd100f0081572ece1e652.exe
Resource
win10v2004-20240226-en
General
-
Target
c6c043ea9a2bd100f0081572ece1e652
-
Size
1.8MB
-
MD5
c6c043ea9a2bd100f0081572ece1e652
-
SHA1
4903d60c7058598dc453a44598ba04d58e77c3e3
-
SHA256
a64821b644a497b09fa567c6eb3252a75b2c8a40e2f8e575b1420a15c82e71ca
-
SHA512
e7d25b0088489684bec6d0f26475d91b6a6c25f74efb2aa5a57c1b5959517fabe0d8d843e104c36f50a0323d06978ff7609a42a3bce052743cb371f254018527
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH9:SCqm2Jpr0nNM7Dus7Nx2d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6c043ea9a2bd100f0081572ece1e652
Files
-
c6c043ea9a2bd100f0081572ece1e652.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE