Behavioral task
behavioral1
Sample
6dfbbdf9f906370c1e43d7c684f786a640d665cd9bd9669b7815d013d4e3318bN.exe
Resource
win7-20241010-en
General
-
Target
6dfbbdf9f906370c1e43d7c684f786a640d665cd9bd9669b7815d013d4e3318bN
-
Size
397KB
-
MD5
9aeb8b383156abcaeb2c5294da1a4210
-
SHA1
2944cfb955161f739a069cbeee8284b6e9123872
-
SHA256
6dfbbdf9f906370c1e43d7c684f786a640d665cd9bd9669b7815d013d4e3318b
-
SHA512
46a0bbe8555884a2f0838c28c300fefe0d76b02795549f888ed68a147c07a8055645747ae6726b02bd9a129c84c56eff1e6b35652983a6769cd74ad72c36014b
-
SSDEEP
6144:KjamzEWtP2nPU1ier+xmCH2KbBS81efEQ2p7K1K3wWwz7:lrmP+R6KoffEQGK1N7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dfbbdf9f906370c1e43d7c684f786a640d665cd9bd9669b7815d013d4e3318bN
Files
-
6dfbbdf9f906370c1e43d7c684f786a640d665cd9bd9669b7815d013d4e3318bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE