Behavioral task
behavioral1
Sample
056aaa35e3f237df95e8500df4255ffa.exe
Resource
win7-20231215-en
General
-
Target
056aaa35e3f237df95e8500df4255ffa
-
Size
784KB
-
MD5
056aaa35e3f237df95e8500df4255ffa
-
SHA1
74fe13b3125cf0242320ede825cf5e4228e72b6e
-
SHA256
694c466ecc9a1dade93188410743bbb1f5ecd552958d885f37adad86db064a3e
-
SHA512
6ee59a2cc0c7f8805afb913248e71c7b7d823ed4fb04516f661bdbd624778a81682e53f17aa4a469ef4943150a045b013b6fa20033de23bce9bcf02ba6743694
-
SSDEEP
24576:ht77r6JAKM22GUMaD1oZS3obVgWonp+UW:ht7TJGUMy2/DA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056aaa35e3f237df95e8500df4255ffa
Files
-
056aaa35e3f237df95e8500df4255ffa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE