Behavioral task
behavioral1
Sample
6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15N.exe
Resource
win10v2004-20240802-en
General
-
Target
6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15N
-
Size
57KB
-
MD5
0e10442e7a69b90b8b239b6462fe7820
-
SHA1
fcfc8e2478a80676c7c1db5010931482b6ec5644
-
SHA256
6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15
-
SHA512
0cf452b096b89f7f9e0650a3fcc3b97619deeff8f0a41090df60960911f860c4202863c0869f3ff71d1bb5b7828aa1fe947b7a7eb1d3bf368deafa801679fce3
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9oQwkci1x2Qwkci1xwwr:V7Zf/FAxTWoJJ7TqQwAqQwAL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15N
Files
-
6aa479a09a68912c59ec83fc3d064392a8bc2c14827b41d4687e3163fd7eed15N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE