Behavioral task
behavioral1
Sample
a6fbe2da08774f78185e8c7a9a936c8c889cd9fca12a2a57cf0c67412dda550b.exe
Resource
win7-20240903-en
General
-
Target
a6fbe2da08774f78185e8c7a9a936c8c889cd9fca12a2a57cf0c67412dda550b
-
Size
10.4MB
-
MD5
240a6d5e76db3522c5985438fdb85bcf
-
SHA1
59153784404f42e931284e6ea3cf6e3040164323
-
SHA256
a6fbe2da08774f78185e8c7a9a936c8c889cd9fca12a2a57cf0c67412dda550b
-
SHA512
8932d04234d73920de1374e9fa70c96d40de752d05c963923df11ee5cf39fead9712b80d26a59cbb0013ce0f715578cd01fb3a887445d18d94c4a7472462221b
-
SSDEEP
196608:GfwktbjDiFSkVTLJxVPNnSLgbPyD0E/QnbwwjEzL4tiHR:1ktbjDiFSSLbVVnSsi8HQzL4E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6fbe2da08774f78185e8c7a9a936c8c889cd9fca12a2a57cf0c67412dda550b
Files
-
a6fbe2da08774f78185e8c7a9a936c8c889cd9fca12a2a57cf0c67412dda550b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE