Behavioral task
behavioral1
Sample
6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e.exe
Resource
win10v2004-20240802-en
General
-
Target
6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e
-
Size
19KB
-
MD5
c4d15eaeebe561a4ff571a76e2bfbc4e
-
SHA1
cbd0fc89f4bfff02bf4c4a9f716c240a7f0beca1
-
SHA256
6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e
-
SHA512
8719103b6eb0d5d80cf09b5bdc0819eb1bee9af8588b4277a1a437ccede1c048ff3f87f3516146c04de2a4e5ec77867a610087414c67acaa00216cd7037d6c1e
-
SSDEEP
384:w+vVeet2kg6CWX5K2wuhxpSaNJawcudoD7Uwz46OXdd362:w2VT2undnbcuyD7Uwc6OXd1B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e
Files
-
6aefe7fe6f0c6216d0b4bbb2c4b29fed671e547362c05a0d94c9f762056d399e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE