Behavioral task
behavioral1
Sample
6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f.exe
Resource
win10v2004-20240508-en
General
-
Target
6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f
-
Size
504KB
-
MD5
171b081ebe4c05aadbe58af9e39b6302
-
SHA1
a4d928affdae90f4b4a38c03c6cac35e214371b2
-
SHA256
6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f
-
SHA512
e4637fae52833dcf78821f3f3ceda3598db571600f164fd932dfa3321a9dd92cd09a22f37229fcd20948aacf6cb49ec5b598af552007988f4e921f44d9372b3c
-
SSDEEP
6144:TKbP8Qt4bUJkQaL9FNCPhex4Q1N6E2ROkcfuqT/SO481NGzSjYXQ6eB3jWm3ZaPf:385aLtCP0c8jxSO4siSKQH6v7j64oSZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f
Files
-
6dccc9c1d001447bf07f1e057940e8540bfb3bec4b3f0246bf7408acb851bf1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1004KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE