Behavioral task
behavioral1
Sample
56a0dc2a7a8c9d88e1f1e90aabb870e2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56a0dc2a7a8c9d88e1f1e90aabb870e2.exe
Resource
win10v2004-20231215-en
General
-
Target
56a0dc2a7a8c9d88e1f1e90aabb870e2
-
Size
74KB
-
MD5
56a0dc2a7a8c9d88e1f1e90aabb870e2
-
SHA1
80daa8cebddb395b8b8ae98fc6c68e863128cf26
-
SHA256
9980af02f466ba5af74bf6efdae6ddfdb911f2c38341006f5b5537e6c5e5c489
-
SHA512
639c652a9e347bd8adc47c18aad26ffb5d2b1e329d158d0865b23a04663cd90ffead0ae1ca5380df534147643c23afc23bacbbf68966c33db2d3819e27308369
-
SSDEEP
1536:SKcR4mjD9r823FgKcR4mjD9r823Fyu3BtYuh:SKcWmjRrz3eKcWmjRrz30sBtZh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56a0dc2a7a8c9d88e1f1e90aabb870e2
Files
-
56a0dc2a7a8c9d88e1f1e90aabb870e2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE