Behavioral task
behavioral1
Sample
6af3f35d5b64b1a31e9f99512a438d70N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6af3f35d5b64b1a31e9f99512a438d70N.exe
Resource
win10v2004-20240802-en
General
-
Target
6af3f35d5b64b1a31e9f99512a438d70N.exe
-
Size
149KB
-
MD5
6af3f35d5b64b1a31e9f99512a438d70
-
SHA1
fd323981a88309fd9315b3cc8071969f102e3c83
-
SHA256
5892d37150b781f3fd4b6c18be22324f21faf21477c71e9fd857cc218824a06a
-
SHA512
f7fd11eb18c83b4e36b7e9a77d060e2fa0ac397eb3606fb229dec59b3f4f63f4365271983b64761384027f49c135436988b5fdaeb110e0ef81766da93e00d66d
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx4LgLoTWn1++PJHJXA/OsIZfzc3/Q82:fnyiQSoFc0QSoFcpti
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af3f35d5b64b1a31e9f99512a438d70N.exe
Files
-
6af3f35d5b64b1a31e9f99512a438d70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE