Behavioral task
behavioral1
Sample
56ecdca386538fefcd788f1b6fda4ef6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56ecdca386538fefcd788f1b6fda4ef6.exe
Resource
win10v2004-20231222-en
General
-
Target
56ecdca386538fefcd788f1b6fda4ef6
-
Size
19KB
-
MD5
56ecdca386538fefcd788f1b6fda4ef6
-
SHA1
188e0ec49b40708cfc258949bc26ad0caf717954
-
SHA256
dcee1f37c93c20d4c39ab2d3d1301071cad1dbcb4fc3120b33b7be176cc34a54
-
SHA512
afc50d462056bc5a7cb3bbc9669f562154b5ad396049a45d2c2d20d182587259e15e627b0e03fa0120845b833247781ec24b282cacaf6d7de2474b4def80a1f6
-
SSDEEP
384:sFosICLxDTXk/BZYyDPBFzonJbNZofXhuWSdr9RZP+:s0C1vIBuyDZFmb3afOW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56ecdca386538fefcd788f1b6fda4ef6
Files
-
56ecdca386538fefcd788f1b6fda4ef6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE