Behavioral task
behavioral1
Sample
c6cb33c06c2a93f40af4359b3627d772.exe
Resource
win7-20240215-en
General
-
Target
c6cb33c06c2a93f40af4359b3627d772
-
Size
21.8MB
-
MD5
c6cb33c06c2a93f40af4359b3627d772
-
SHA1
6898b3962e1f804e3906aea5c1f568e5f0d22c1d
-
SHA256
70bfdf211859e950a211e6ee8319d45a12953e5b4ee4a754fd3dedd7fb9fad56
-
SHA512
f49565fe1c0e62d40511f5130d8cd38da2d3710b6012208f741091ed200dab709a1ea5fb1b6799db59d2aea134b1a8dc1c31364ee2fc50802bd70c398cb7a4d3
-
SSDEEP
393216:kO8rn1VO/vyQWB/zO9RLsAP/+I5twBjKlQMlpgliXUxR0rHf93WhlA6tnoMc:kO8r1VO3ytLOHLJXXtwMBlQVc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6cb33c06c2a93f40af4359b3627d772
Files
-
c6cb33c06c2a93f40af4359b3627d772.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 18.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17.9MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE