Behavioral task
behavioral1
Sample
6d0cb867f755fd66ccc98136f4506b1b1b8ee83361efeeb9720a3d1af311d1be.exe
Resource
win7-20240903-en
General
-
Target
6d0cb867f755fd66ccc98136f4506b1b1b8ee83361efeeb9720a3d1af311d1be
-
Size
245KB
-
MD5
326aa1a77ca0c26f52a4ae017c68b4a1
-
SHA1
900212aea71616f1fdeb711102c9d484a4065939
-
SHA256
6d0cb867f755fd66ccc98136f4506b1b1b8ee83361efeeb9720a3d1af311d1be
-
SHA512
d1b1ad2998a45fa1b8bb8ba742eaa3fef4a57ee605bb618f11d06bd90898912ffeb1f8aa63f00adf738accc1bebb65fd839bc39996b09934cdc1332b3c7761bf
-
SSDEEP
6144:lYhYXa9MvwOz8Ev9bvTXrF6iTLo1KcAvQRoS:lYOXXR1b7R6VNyQRoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d0cb867f755fd66ccc98136f4506b1b1b8ee83361efeeb9720a3d1af311d1be
Files
-
6d0cb867f755fd66ccc98136f4506b1b1b8ee83361efeeb9720a3d1af311d1be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE