Behavioral task
behavioral1
Sample
06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a.exe
Resource
win10v2004-20241007-en
General
-
Target
06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a.exe
-
Size
29KB
-
MD5
b362ed78ae4485d733be39842f7f376e
-
SHA1
47b803a7f6ae0f2e6dda779a6cfb19d3038bc1c1
-
SHA256
06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a
-
SHA512
3282b36891f92b1aeb4e8bb4fea358315558470e31293e6f1e1955960f879c91747f3e75dd75d869cbb595b208ddc7077819fe2b5538c3330702f5b808d596e0
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/GE:AEwVs+0jNDY1qi/qOE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a.exe
Files
-
06a7e0acc29fe6e90995f06cd174e58afb62df6b3a3a7514d1134ca7752f083a.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE