Behavioral task
behavioral1
Sample
6c59ce539fb25625ddbe210a8566c930N.exe
Resource
win7-20240729-en
General
-
Target
6c59ce539fb25625ddbe210a8566c930N.exe
-
Size
283KB
-
MD5
6c59ce539fb25625ddbe210a8566c930
-
SHA1
e84ef6dd805dd66600555d83ef048a4e520028af
-
SHA256
36ee438fb0c91e3c4f1d4575bc05e5d6e5ad600343961617d9073fc5cfe23d1a
-
SHA512
d27b9b5cf745e04247caa5d43689c8a7dc9de1422cd9f2b5b54cb971a1e8647469099647eb2a446aa197b3dae0bd0c505d5c1023266c27897d354000a34a7299
-
SSDEEP
6144:ugHX5BGeyzxxWf26TUQ9NwWlIaLhjgWzDT2+Sb:ugHX58NxWPX9NwWqaVj6N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c59ce539fb25625ddbe210a8566c930N.exe
Files
-
6c59ce539fb25625ddbe210a8566c930N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE