Behavioral task
behavioral1
Sample
6ac84cf30dfdb3b68bdbbf757f227dac3457227a6e1d171f98dbc584be7f6916.exe
Resource
win7-20240729-en
General
-
Target
6ac84cf30dfdb3b68bdbbf757f227dac3457227a6e1d171f98dbc584be7f6916
-
Size
171KB
-
MD5
148d6bd9f70e717c3c5ea5ed926bd1e9
-
SHA1
82b6c3ecfde0aa6e542ccff579792a2217fc40ec
-
SHA256
6ac84cf30dfdb3b68bdbbf757f227dac3457227a6e1d171f98dbc584be7f6916
-
SHA512
070362546078d407f9bf9e398a4b5b45e41306922fefe97735e6a40af8cd8f74c37028d321d3e12e875f0ab6f6b135d58e6ef05b74b7d8ced8e22fbe4239a590
-
SSDEEP
3072:BDv9qEbIoZJ2Kl4woKBFbUPUfp8BASUZmK1bF8Eev9/GpiK2kQsFTHwsBWOdUtoq:BAEbIortipEGcfpkjUZm88EeVQiojjd4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ac84cf30dfdb3b68bdbbf757f227dac3457227a6e1d171f98dbc584be7f6916
Files
-
6ac84cf30dfdb3b68bdbbf757f227dac3457227a6e1d171f98dbc584be7f6916.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ