Static task
static1
Behavioral task
behavioral1
Sample
6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739.exe
Resource
win10v2004-20240508-en
General
-
Target
6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739
-
Size
1.6MB
-
MD5
3bdfa9c0b717d6f4ae5f1e283208c1ea
-
SHA1
e57817fa2a1d7367ad739013e7724a908a6167a8
-
SHA256
6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739
-
SHA512
d26cfe180e5537e9ec70ce563fc8eca96a0cf2e155e73a2414bc9e4809414bbdc55536e31248c941202cd5ec092e2707e3d6fb13d3d5bd3c84ddbbc08b782c07
-
SSDEEP
24576:lq8683gO6Y5Wzm+7M5WvgX9dfJ+bCB6OKggeEHT1n93GxhbnD3QHf6vn6C8V4sp5:CodTwDM5xnRX6FJbTrWrzzwf6v6tmS5
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739
Files
-
6a26de6ab1ce7f2bc0fc3bb2e03543d868523a55af7843ca4c6c9d8eb82ec739.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE