Behavioral task
behavioral1
Sample
6b26ac502c0967d0be631d90bcbf48f0N.exe
Resource
win7-20240903-en
General
-
Target
6b26ac502c0967d0be631d90bcbf48f0N
-
Size
55KB
-
MD5
6b26ac502c0967d0be631d90bcbf48f0
-
SHA1
a87282224c816f06ede154427b28c3c94d8beeea
-
SHA256
16316ceece3b24a05e00f5b93d84f12b49c9238fe8dbc6f718c609f6f5d18ed9
-
SHA512
9fe32da8b643ba05e143624e30a4348f37e2d21070dea96be06a5e71f1262dd4a477ef2b9c9a40a01f3c3fa6f87ddfd4819bb2053b8428b893b317652f764367
-
SSDEEP
384:63AhVC2PJ6wRC8vPpMiuMZkVo+TPo7bIEuiI8LbRKvsYJtuigBe68tRbSl4xHjTS:2CLP5uK6DoNupKYsTicUta4xni9L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b26ac502c0967d0be631d90bcbf48f0N
Files
-
6b26ac502c0967d0be631d90bcbf48f0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE