Behavioral task
behavioral1
Sample
e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421.exe
Resource
win10v2004-20240802-en
General
-
Target
e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421
-
Size
182KB
-
MD5
c83da65a5a1cb38e16d33fd9d38c82d7
-
SHA1
53c376e400cd38e012492673dbaa0daa823ccf56
-
SHA256
e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421
-
SHA512
74155687be814621f11fcd9b9e8ca6061477c525d22bbef8e5308da8ca12e6029a982a6cf46cc9c0a5c5612fc8ac2d8395ad9de050d9cb2ca09ecd9f806420eb
-
SSDEEP
3072:COLoC9NJpPsJFn7RrH8MzrCyUNNxm6oh8o+wfda3B2aHoaKiU7H:LdbPsp8gWJrlidI3QaIahU7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421
Files
-
e6c03be97a551085ed70a07db84b6e7c48608f0b50ecb0b521a17e0538123421.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE