Behavioral task
behavioral1
Sample
6b09c16b338d587b7538181be5acda9c7cd8cba594d0836b28848b8e37385fc1.exe
Resource
win7-20240903-en
General
-
Target
6b09c16b338d587b7538181be5acda9c7cd8cba594d0836b28848b8e37385fc1.exe
-
Size
1.5MB
-
MD5
4118b5133a266f0629c63ad2c3a769ed
-
SHA1
515aef91bb818046cd1dd6d3ccad92d6d7290e3d
-
SHA256
6b09c16b338d587b7538181be5acda9c7cd8cba594d0836b28848b8e37385fc1
-
SHA512
8f634df6bbf40900073a5bc47592b9f2b8d97048108fa26bef61a1023190ad37da546d429bfa56e9be8e4b72af19c0da72f6b6538db684ca8d44f501ecde0572
-
SSDEEP
24576:FNeUL/JfC5nWgDOACzwevJDkzUXuY4CTBC0LmcDO+60tJls05RmDf/z:3/VC5Wgq1z7lXu7uzSs+Csymf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b09c16b338d587b7538181be5acda9c7cd8cba594d0836b28848b8e37385fc1.exe
Files
-
6b09c16b338d587b7538181be5acda9c7cd8cba594d0836b28848b8e37385fc1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE