Behavioral task
behavioral1
Sample
56dc6abf96e0e11b40aec99d79d05856.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56dc6abf96e0e11b40aec99d79d05856.exe
Resource
win10v2004-20231215-en
General
-
Target
56dc6abf96e0e11b40aec99d79d05856
-
Size
3.9MB
-
MD5
56dc6abf96e0e11b40aec99d79d05856
-
SHA1
e69e6b2cf114d15eb85d8c3b74fd3cd64deee28e
-
SHA256
c73faaf9bbe8c81b543f98c82aa0f5a05b4ad3cb7b97af93521872191ac87aea
-
SHA512
66adc551838bdda5e89eebe6d629cdf7bc18544135bb1ad2611066c735bc169459933ce33424acc75d806eec82839eff7e9a471dca5b8fe353d8e36bde46b297
-
SSDEEP
98304:Lyy005McakcibiqhMbMgOn7n0bcakcibiqhG/JewlX9HGnrcakcibiqhMbMgOn7R:259dlirybMgOnkdlirhwlXhGnrdlirys
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56dc6abf96e0e11b40aec99d79d05856
Files
-
56dc6abf96e0e11b40aec99d79d05856.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE