Behavioral task
behavioral1
Sample
6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3.exe
Resource
win10v2004-20240226-en
General
-
Target
6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3
-
Size
2.5MB
-
MD5
b3e6e1ba0ff4e734e016e45d7135a4ee
-
SHA1
7e2a08fc9bdf0f44c0b2d5b6ca4f3a1c50b44807
-
SHA256
6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3
-
SHA512
944d2e01146d8cac2f7b74e85945efc59d8f188eb9a40d21617b81e7fba60e84940e1c30ef016cf70538cf552129d32fd8a8b7765f3596594735fc798786afc9
-
SSDEEP
49152:xFDnSjZFVcbpooHuRNxnfEIeATNKyf5E+ug6DYJNnAENKk:xFS6ughlSNK05E4iYIk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3
Files
-
6be542f5705d9a6ad7784117f222d7d1839d6406bbd236a88661b7f9b88726b3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE