Behavioral task
behavioral1
Sample
6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc.exe
Resource
win10v2004-20240508-en
General
-
Target
6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc
-
Size
4.5MB
-
MD5
380d27622ab468c1281889f71fee20e6
-
SHA1
719a45ae0c894fd16c9994f2cc39574182b9dcee
-
SHA256
6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc
-
SHA512
128793c12c2c9510252a2fac8ab77340e59edd4e89f216aac7000e2f148fe48a651360e0e623f290caec13bf1751d323f555ac7739b108a898b1cd6834889183
-
SSDEEP
49152:kLjEi4ij8eN/BUM+66Q12BJWFh1d7p0p/3R+RpVVn1EfyUdbIVBFNTOcglz0Ch9o:Y54eNSc12B+x7p0p/3R+RbHLBLyruc4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc
Files
-
6768f422710b4d7c04e9f1f3ad2f0dc2d5611b7f712b75f722ebb77c25236acc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 427KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE