Behavioral task
behavioral1
Sample
6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63.exe
Resource
win10v2004-20240412-en
General
-
Target
6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63
-
Size
2.5MB
-
MD5
58365edb9a3ad752206b384bcc060dd2
-
SHA1
789fd3a638adbc41f5c93b0138d8b0a7f1687fd6
-
SHA256
6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63
-
SHA512
46c2cf0adfe8e0d2c06d4f5064acce0533ec5070a1fff8e3660f5bc16051ca81ca2fa99d033a2082c32731267664a3aabef7d1017070b5172c0c0c53bdbda5e5
-
SSDEEP
49152:xFDnSjZFVcbpooHuRNxnfEIeATNKyf5E+ug6DYJNnAENKk:xFS6ughlSNK05E4iYIk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63
Files
-
6a3c02700a668187e6891792abfde1abfd118c4356280df3a35692104a8ccc63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE