Behavioral task
behavioral1
Sample
0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfbN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfbN.exe
Resource
win10v2004-20240802-en
General
-
Target
0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfbN
-
Size
655KB
-
MD5
eb13193fe6fd7c50545d6a15f7323090
-
SHA1
6d6505cec49b7de70eea262d2abd873eee0a9410
-
SHA256
0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfb
-
SHA512
ecfe9eb0ad61236118614545fecf3a2144afe968a14c32e8b9c26f91025cc8134d5e116ed86bcd0261f05cca5d16f97f575671f2bd64f53511a1cc9fbb21688e
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFw:1HNJDMor12mquPZjq2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfbN
Files
-
0c6696dfd2c9ca5abdf809c818ad34724fe794181787f1210ad77d5f58eb7cfbN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE