Behavioral task
behavioral1
Sample
6b79f231c7b0d893d205a2463f6d8e90N.exe
Resource
win7-20240704-en
General
-
Target
6b79f231c7b0d893d205a2463f6d8e90N.exe
-
Size
71KB
-
MD5
6b79f231c7b0d893d205a2463f6d8e90
-
SHA1
2bcaae91f0ce27eee175c6a2943572c53c668027
-
SHA256
5158a7dd43d7d067fe39d9ff677ffeee4a65ad29eb50bd5d3f200f32f214c153
-
SHA512
e0623ab6c38e64ac66386c42e594c5954a7ff8f6e6ee4ab41ddeab1a9795c3033975e169b56baf8a2cc6fe26e40f5f9b2062bc30928b2608d843a0be2b32ba1d
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOioMpOiJfoMpOiJDJNLJNRKYWg2Wd:V7Zf/FAxTWoJJB7LDqnJJNLJNRKmYW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b79f231c7b0d893d205a2463f6d8e90N.exe
Files
-
6b79f231c7b0d893d205a2463f6d8e90N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE