Behavioral task
behavioral1
Sample
6a4119fd592e69c86c8e4f08a7e6e870N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a4119fd592e69c86c8e4f08a7e6e870N.exe
Resource
win10v2004-20240802-en
General
-
Target
6a4119fd592e69c86c8e4f08a7e6e870N.exe
-
Size
72KB
-
MD5
6a4119fd592e69c86c8e4f08a7e6e870
-
SHA1
fb42be3f1464654c845dd9aa3173da476d3ccc29
-
SHA256
ba274ea2de487b6b360bdc45a944b356a6813d5473a7a9926937e4d0f6ef0947
-
SHA512
5dbd6a0d6a0956fe69923549805b036f62d120c902c5d3b133c71513c2be5e473c782477122fd6ee3f7cbf8c120123e02ad532a42566afd9a544690d2b72e7b1
-
SSDEEP
768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXKqAJxg:a7ZyqaFAlsr1++PJHJXFAIuZAIue
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a4119fd592e69c86c8e4f08a7e6e870N.exe
Files
-
6a4119fd592e69c86c8e4f08a7e6e870N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE