Behavioral task
behavioral1
Sample
6a6660d4dbcefb96b9d0246eef6cde2d3e8a98195c73ef54320a89f76fcc57ecN.exe
Resource
win7-20240903-en
General
-
Target
6a6660d4dbcefb96b9d0246eef6cde2d3e8a98195c73ef54320a89f76fcc57ecN
-
Size
3.9MB
-
MD5
c6082e91f41070c49568633a59c4df80
-
SHA1
4c3a3e8ae28be1d868406d250cdeac4ef2144f97
-
SHA256
6a6660d4dbcefb96b9d0246eef6cde2d3e8a98195c73ef54320a89f76fcc57ec
-
SHA512
d559362135b86a427e3de95b95a7ba470ea2d8f2706ae2ccfe8b4fe0ecc7cfe5568c87c7d75876a4fc04aa845d22b08a29ef5c0708e0930005d586f1ec0b7462
-
SSDEEP
98304:NNPN4TYfbOHmuxT6zHb1Fa9cOHmuxTBAnPs4rNr7p5kfIYOHmuxT6zHb1Fa9cOHt:CTYjzz71FscmANfpfYzz71Fsc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6660d4dbcefb96b9d0246eef6cde2d3e8a98195c73ef54320a89f76fcc57ecN
Files
-
6a6660d4dbcefb96b9d0246eef6cde2d3e8a98195c73ef54320a89f76fcc57ecN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE