Behavioral task
behavioral1
Sample
6abe6340642af8345c05587975d1d633cf738be817d703605d3541d47a484876.exe
Resource
win7-20240903-en
General
-
Target
6abe6340642af8345c05587975d1d633cf738be817d703605d3541d47a484876
-
Size
62KB
-
MD5
a142f77cc988f9fdf6bebf4efcb89675
-
SHA1
3dafde528c4e5762486c70a3bd5a13dad9351ab9
-
SHA256
6abe6340642af8345c05587975d1d633cf738be817d703605d3541d47a484876
-
SHA512
4416ffa7a39d4d6c866b9a101e6fdf70655464bda773e39851846367406e10d9a8e8e61e9600d87be40129eac98c4c1b903f55607b93f358d8d248659de012b1
-
SSDEEP
1536:0vQBeOGtrYS3srx93UBWfwC6Ggnouy8CUYj7FK4O8A1o42:0hOmTsF93UYfwC6GIoutX8Ki5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6abe6340642af8345c05587975d1d633cf738be817d703605d3541d47a484876
Files
-
6abe6340642af8345c05587975d1d633cf738be817d703605d3541d47a484876.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE