Behavioral task
behavioral1
Sample
b6c668a9714e0bd4734e7b129963d4d07cfea091463fcaf36b2e2f4d8f8212a7.exe
Resource
win7-20240221-en
General
-
Target
b6c668a9714e0bd4734e7b129963d4d07cfea091463fcaf36b2e2f4d8f8212a7
-
Size
368KB
-
MD5
0a5f7723f8af34b5add7d408fbef0a56
-
SHA1
874298f1a4f619b3a813b9ed6292a3673e7d591a
-
SHA256
b6c668a9714e0bd4734e7b129963d4d07cfea091463fcaf36b2e2f4d8f8212a7
-
SHA512
7913662f00e51c8f110efed9bcdbffb0fbd0a6c8f0643a12eab72f31a46c24835c5c629610acb26d9583a9f264e16f9777612a9dc3bfa7f8bc3cebcf8a926733
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSM/xO:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZP
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6c668a9714e0bd4734e7b129963d4d07cfea091463fcaf36b2e2f4d8f8212a7
Files
-
b6c668a9714e0bd4734e7b129963d4d07cfea091463fcaf36b2e2f4d8f8212a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE