Behavioral task
behavioral1
Sample
6cd5a3b059bcd86859341d7d6dc6b3af87f2bbb1ed07a575b2046d1c49990251.exe
Resource
win7-20240903-en
General
-
Target
6cd5a3b059bcd86859341d7d6dc6b3af87f2bbb1ed07a575b2046d1c49990251
-
Size
11.6MB
-
MD5
0b28f10082514d5aaa77e9891ef46488
-
SHA1
65a1072d9edb440c64ef46a84c3fc6c5a3c4d7e4
-
SHA256
6cd5a3b059bcd86859341d7d6dc6b3af87f2bbb1ed07a575b2046d1c49990251
-
SHA512
cd7360a10a1e7fb3d3d60494024c9cca0214057fafd345ed72595f6c75ad0babe0d83f985c5c6ea7614fb62bd43462c6be9284f39bc1fbff5d1c709b813c201d
-
SSDEEP
196608:+hHrDFpC/eZ8DT71sfUlmp3XFOvSejkzr87vY3siwFH58cp4NWhNGX1M+5nhjGZD:+VlpCmET71LyOC87w3hqZRp4NWhNGX/Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cd5a3b059bcd86859341d7d6dc6b3af87f2bbb1ed07a575b2046d1c49990251
Files
-
6cd5a3b059bcd86859341d7d6dc6b3af87f2bbb1ed07a575b2046d1c49990251.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE