Behavioral task
behavioral1
Sample
6f1b52b13b07033a808d07b871448460N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f1b52b13b07033a808d07b871448460N.exe
Resource
win10v2004-20240802-en
General
-
Target
6f1b52b13b07033a808d07b871448460N.exe
-
Size
655KB
-
MD5
6f1b52b13b07033a808d07b871448460
-
SHA1
535c69c6bbd0549e0b85a258bd69aca3ffe273dd
-
SHA256
c579d30ae9455e640ce1e21a19ff910d9dd47bfe8bb45b52e19be89a5c81f925
-
SHA512
4d9c1224b079d24755d256cb96c1b5f83fac4caebe07a2116a37e0ec6edee32513cbae3989b6a5068dd78bf769daffb9c75fb103b989b702fb15949e5db3318a
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFF:1HNJDMor12mquPZjqv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1b52b13b07033a808d07b871448460N.exe
Files
-
6f1b52b13b07033a808d07b871448460N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE