Behavioral task
behavioral1
Sample
6e09ca0e67a45adf753d48e15fbaa340.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e09ca0e67a45adf753d48e15fbaa340.exe
Resource
win10v2004-20240426-en
General
-
Target
6e09ca0e67a45adf753d48e15fbaa340.bin
-
Size
1.4MB
-
MD5
6e09ca0e67a45adf753d48e15fbaa340
-
SHA1
669ebb41f82aad0dd4638eab9a06b03891cb6a9f
-
SHA256
d50b569da8e0e6997a0ba87dda4afb2d225bef9ebe51d6dcbe2d6082aedfa82e
-
SHA512
8213b58d3e2f392a3d0529c909b6498ef70d8093f22bc9249afa51a5653c0508b3b1b6b85dd4e6a7239cd7d3cef8df21254a6e68683c5013ee8180a08a559738
-
SSDEEP
24576:V/Bh8LN7j6Isx//rYawaV+0JJfmmFB6Tv9KnV9T2EnU+OIR4svLMq:P+pKRx/gy4vj9KnaEnzOy4svLX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e09ca0e67a45adf753d48e15fbaa340.bin
Files
-
6e09ca0e67a45adf753d48e15fbaa340.bin.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB