Behavioral task
behavioral1
Sample
c6dd633fe4124c36e98e92b2effbc806.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6dd633fe4124c36e98e92b2effbc806.exe
Resource
win10v2004-20240226-en
General
-
Target
c6dd633fe4124c36e98e92b2effbc806
-
Size
32KB
-
MD5
c6dd633fe4124c36e98e92b2effbc806
-
SHA1
d2ea5099646f7740c2dce23478989c8f7100c53a
-
SHA256
ca60c94d848a382f2eb95a46582d1a0c7ce5c4865dc35205717953a406d34c07
-
SHA512
dbefacdfcf50f94b9d6c223653f899587152605850f87c9f7129c35bb78c8354df0d88abbb90b0953b586c2d2015a46519f0fc5078ef0323192574bcc2eb2ef3
-
SSDEEP
768:IQns630YuuSrEzBLNMzEc8Ax9VgwVcIVtCe2/Y8:IwVEYFBBLaLjgap3Ce2w8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6dd633fe4124c36e98e92b2effbc806
Files
-
c6dd633fe4124c36e98e92b2effbc806.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE