Behavioral task
behavioral1
Sample
6be8ac835486c2087daadb0a21af2cc6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6be8ac835486c2087daadb0a21af2cc6.exe
Resource
win10v2004-20231215-en
General
-
Target
6be8ac835486c2087daadb0a21af2cc6
-
Size
1.2MB
-
MD5
6be8ac835486c2087daadb0a21af2cc6
-
SHA1
798001574378a9708e2eddf639fd79201c36b49c
-
SHA256
05677a2ec32aae3a944f86582216b1f9fc11c02c91f9e6a6c86f7f6f1c7ac07b
-
SHA512
a23765497422c777e3a14d7e744ced89494ce9ccabdcd8f425f3b7ea52f0ee5cfd1ccc9e2154b26ee8d19442b7ce73d8a8e83d87aa9815928b7133397c30e49d
-
SSDEEP
24576:gc1RgOu/ylSm+WTwsO5KkWKsh7MKAESkk5Z5TcX1x3r3frJJ:5nu/ylSm+mwdskWLh7MKzk5Zyjr3dJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6be8ac835486c2087daadb0a21af2cc6
Files
-
6be8ac835486c2087daadb0a21af2cc6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gtcl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oncez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bsp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ