Behavioral task
behavioral1
Sample
56df734d23143c3361865fc4ab373f7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56df734d23143c3361865fc4ab373f7b.exe
Resource
win10v2004-20231215-en
General
-
Target
56df734d23143c3361865fc4ab373f7b
-
Size
64KB
-
MD5
56df734d23143c3361865fc4ab373f7b
-
SHA1
7cac642e08777465ceb9e8528fa2a8b79d0bdb63
-
SHA256
aaad058fc2f5efda0f00103bcc38ef75bda357b3344971e1b1930dd611e20473
-
SHA512
9d3e37fe6ee8b7a6d7dc5b1fb3881694a9990c919b93fd3f0d68a228ebd5fca8e05aea15dae1da95c1e2d41145ed7a74012c7d75cb54f1b1aaba7626342c1f99
-
SSDEEP
768:MiPPTYiNCSAetFpamkQzXmRItONlg8PyNUMsFYsktATb6jzUJ:M0FptJiNng8dViN0m/g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56df734d23143c3361865fc4ab373f7b
Files
-
56df734d23143c3361865fc4ab373f7b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE