Static task
static1
Behavioral task
behavioral1
Sample
c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411.exe
Resource
win10v2004-20240508-en
General
-
Target
c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411
-
Size
505KB
-
MD5
73931cc6c3643cf2552e5dbd0f3f2a3d
-
SHA1
a647407a2840a830ebbebf15c691303356672eec
-
SHA256
c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411
-
SHA512
d2583061bac7f30ed95003c735a535d367fb156dbd325d106e68b0e41451f0c757768e82ec077de7023e9ee87e450e34b352c9878a567c7571785cdfb77c16a0
-
SSDEEP
12288:wlbo+b1gL5pRTcAkS/3hzN8qE43fm78VE:Wbo+G5jcAkSYqyEE
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411
Files
-
c6855163f46c2e5ac518656fbfbd2be6a832d4c37b93e09f28161330f3efd411.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE