Behavioral task
behavioral1
Sample
6bc93902c68a241c1e611103d31c06d70a76d9673282d7c585c778d61cb00ba6.exe
Resource
win7-20240704-en
General
-
Target
6bc93902c68a241c1e611103d31c06d70a76d9673282d7c585c778d61cb00ba6
-
Size
219KB
-
MD5
c098d6f31681f642ea60a0047be0462b
-
SHA1
450dd2e9c66736f0118d98856627d154ce131466
-
SHA256
6bc93902c68a241c1e611103d31c06d70a76d9673282d7c585c778d61cb00ba6
-
SHA512
757a1fa3e142312431cfa41addbfc7d2fc1d04602b02f407395ca27f9936c40dfe4c807208f99927b67f557939920751a260c33e5266899e2dc478cf30dd2ec9
-
SSDEEP
6144:o/GtTRu4WNcbqbT4k8h7xI6QH/g5286xX+4MXEZ6vRN0oS6:o/hNiqw9hy6+YaAPp6oS6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bc93902c68a241c1e611103d31c06d70a76d9673282d7c585c778d61cb00ba6
Files
-
6bc93902c68a241c1e611103d31c06d70a76d9673282d7c585c778d61cb00ba6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ