Behavioral task
behavioral1
Sample
6172698ef4bd6cce416195c1848e1520N.exe
Resource
win7-20240708-en
General
-
Target
6172698ef4bd6cce416195c1848e1520N.exe
-
Size
9.0MB
-
MD5
6172698ef4bd6cce416195c1848e1520
-
SHA1
a764fe624fd818c8e3065bb9fde6a3b351a53d89
-
SHA256
57869a5f8db9d5c201000edb1e7078d67d02fca7f221785d566bf43ce0d62b6b
-
SHA512
e1051bde90d0d110716469b0f74531fff07effa8ef9671ada56261249d35ec0bf3e747934d469998000e6ef1b68e77b1a6e0ab42276d8739e0a1be7f4309fbe3
-
SSDEEP
98304:IllllllllllllllllllllllllllllllllllllllllG:1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6172698ef4bd6cce416195c1848e1520N.exe
Files
-
6172698ef4bd6cce416195c1848e1520N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE