Behavioral task
behavioral1
Sample
6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68fN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68fN.exe
Resource
win10v2004-20240802-en
General
-
Target
6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68fN
-
Size
58KB
-
MD5
7a71ac7bdb51f340e1a3f02996fa33e0
-
SHA1
4520f014b5eae49a1342b25b208b36afec47131c
-
SHA256
6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68f
-
SHA512
eac7ccf3001ac3e024e88f42c22338804c04c79617607385621b5653fef5c5651e79bc0696b5816a41c09a1341a00f7e25ce28ab6e1d1e216e8aedc91bece2ca
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiVqAJyqA5:V7Zf/FAxTWoJJ7TTQoQo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68fN
Files
-
6ef9b1a05071ecb2ac3d411ac4eb4b70d381972631c045029bae680f0f99b68fN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE