Behavioral task
behavioral1
Sample
6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41.exe
Resource
win10v2004-20240226-en
General
-
Target
6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41
-
Size
2.5MB
-
MD5
8322e86ed7c70f50b3d4c913f1383618
-
SHA1
74126f81bd6140baab2788eef58524315c18c1da
-
SHA256
6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41
-
SHA512
2831bfcb56dd3db2c231848835316785ec55958fdc2e424435bab5f23fdd156d743af9594b60083ed72a52fd0d3192effdff07423bd7ac580af512010574b9f8
-
SSDEEP
49152:b01y5kldZgp+wfFTd+jFcaMNw/qccdMOkAuMst8ztlrlh3n9DuD5FiHmHl1qk:Y1y5kbuUwc2pkRMuerlZn9DuDTImHjqk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41
Files
-
6ea9b5853ff190557a0cf2370368e28fbc90cecd8eff4ced0e7e91b1842c2a41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE