Behavioral task
behavioral1
Sample
6dd1a8690094ba35b15996cb5f9b1f60N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6dd1a8690094ba35b15996cb5f9b1f60N.exe
Resource
win10v2004-20240709-en
General
-
Target
6dd1a8690094ba35b15996cb5f9b1f60N.exe
-
Size
31KB
-
MD5
6dd1a8690094ba35b15996cb5f9b1f60
-
SHA1
fc333783b4c84333782a91239fbf3d5e35f1e659
-
SHA256
63d6dc01f783a52120c9988aeca0f6203335d7c47c1a62c3150a8b58cac1e105
-
SHA512
5c5068574224f8a743582cca855512f45a2efcbe4c3c54174147859384841137f5c66b18969e7c6ad0d59a9b4c77b85896365b4107a20f312654030889c3add8
-
SSDEEP
768:4noSEjp9Plchfr6TUqnbcuyD7UYK4pavvvZeee26666HEEExTtqqqqL6:4oSEZWTUUqnouy8YXEvvvZeee50
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dd1a8690094ba35b15996cb5f9b1f60N.exe
Files
-
6dd1a8690094ba35b15996cb5f9b1f60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE