Behavioral task
behavioral1
Sample
6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7.exe
Resource
win10v2004-20241007-en
General
-
Target
6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7.exe
-
Size
124KB
-
MD5
537a6a752995846cb063f20bc44bfa09
-
SHA1
dbfa26e789cb44dd0e9b035accb34c583c93bbdc
-
SHA256
6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7
-
SHA512
6e90af2e5dcfc7751e6ca534cc4ae7c0171b93324c130bfb7cb11fbab9c5eb5a13a2e5ca1d6bb38fc46a2c56d76c2adbafa65218ce5cf5102ae4c960b722cdb1
-
SSDEEP
3072:fny1tEC9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pw1:KbEC9iMGsSaOyig
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7.exe
Files
-
6cdeb54dc7b705e34d587827440f73b2f5c6e9b04c642e9857e651bfcf7549b7.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE