Behavioral task
behavioral1
Sample
6c9d277ba0b62669110226ae1ac86c713a1769c365a9d4564a2ccb9751294969.exe
Resource
win7-20240704-en
General
-
Target
6c9d277ba0b62669110226ae1ac86c713a1769c365a9d4564a2ccb9751294969
-
Size
6.3MB
-
MD5
032e9cf78f3f7b9317031a428504517c
-
SHA1
c2afb24b5f99b0ff18be8c72853053a0f9f406b2
-
SHA256
6c9d277ba0b62669110226ae1ac86c713a1769c365a9d4564a2ccb9751294969
-
SHA512
313302513c75e0134c32c28f09e97ba42e2a7d6ba978c025f135fd7d6e0a2031911f4908effa4d77d4277233173eafed79f752f794b2acfb1e2fe5b5b6dec4f1
-
SSDEEP
196608:UMBf4FY0Y+YneDPZiwGPNZqNIg74/rnkZ0T:9p0pmQBiwGCJ7Mg2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c9d277ba0b62669110226ae1ac86c713a1769c365a9d4564a2ccb9751294969
Files
-
6c9d277ba0b62669110226ae1ac86c713a1769c365a9d4564a2ccb9751294969.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE