Behavioral task
behavioral1
Sample
6dc20eb6213190edabf7f923f1710af0N.exe
Resource
win7-20240708-en
General
-
Target
6dc20eb6213190edabf7f923f1710af0N.exe
-
Size
161KB
-
MD5
6dc20eb6213190edabf7f923f1710af0
-
SHA1
dea9f6836ef14f7b7deb11af1f9ed828517462a3
-
SHA256
18e549fa68cc8562fa6ca86ff583a4664c166ace3a104ee0fcd647e93b749d35
-
SHA512
411806b2797f69aa41e7ec519dfa5184f8b48fc8f2ade00f6e0cdf4d04c7fdbe6dd02a0166c2459d9163dc78a42b05d9362783790df8fab33b571c0492588a03
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNy3nJLZ8/JLZ8kD3TW7JJZENTNy3nJLZ8/JLZ8kDzTmXadD:fny1tEuSDAtEuSDz6W2QZwKS7u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dc20eb6213190edabf7f923f1710af0N.exe
Files
-
6dc20eb6213190edabf7f923f1710af0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE