Behavioral task
behavioral1
Sample
6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34.exe
Resource
win10v2004-20240802-en
General
-
Target
6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34
-
Size
55KB
-
MD5
492bd90ac655e3515c51a0a6278d759d
-
SHA1
e0fa1bf3d70f0fe793afc8d6cd70fee3a6b31ed1
-
SHA256
6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34
-
SHA512
52d152ce4fc4e86d7ac95850ddd33d6081abddf15ed0b67e5ba3c2b183d052dc167eb0a75541330316f3b6cb8e469746c1a6b1d4fbc61f9f8532b02372b82387
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJXY:V7Zf/FAxTWoJJ7TPUcY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34
Files
-
6e888a0cddd271750df2928c64046fba03a4fe78357958c3e0b4d5eb26269e34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE