Behavioral task
behavioral1
Sample
6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687N.exe
Resource
win10v2004-20240802-en
General
-
Target
6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687N
-
Size
204KB
-
MD5
217902617392df91c197bcf95da9b3e0
-
SHA1
5658ab0078e3f394a71a3add97142bb3138bce2e
-
SHA256
6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687
-
SHA512
9e6ad0863a77cc11f1f480714eb7cd90bdde8f1ac4784f608f9f67000bbdeb8d13beb5017d127a4d0cd7b34c958bcf6f2172d2de98b7dcc301d2fb10a5868204
-
SSDEEP
768:LlvMancJjoALxuzHwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14Pm:LRlcJjnLxu8lGVs4emEFb3P0lp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687N
Files
-
6426c55ee92bc11503c04f29c37dbbc0e36b3935ecfa23da94372e887a1e5687N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 171KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE