Behavioral task
behavioral1
Sample
256d55bac6fd6b444b1032a1f46547c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
256d55bac6fd6b444b1032a1f46547c9.exe
Resource
win10v2004-20231215-en
General
-
Target
256d55bac6fd6b444b1032a1f46547c9
-
Size
821KB
-
MD5
256d55bac6fd6b444b1032a1f46547c9
-
SHA1
58dbd137c6dac88d4c4666d13b24ed3a4138c540
-
SHA256
dd16fc1ccfc6671c0021c6f3325116112a2bc78f04f1c5dbd45b786e58209e05
-
SHA512
ff8ab9c32895df301a6cbd85d77128c5188854c4dec067d51fdee2e95de2c23670c2b7b9e3175e8bccc48e4dd2cc718a0e1b46bf53913afc385607041ee13d20
-
SSDEEP
24576:S6Z0vXfgTHqDLFgKM0j5tnt9y44bcjukL2CDYO:S6av4THsLFZ7n69bcakLz0O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256d55bac6fd6b444b1032a1f46547c9
Files
-
256d55bac6fd6b444b1032a1f46547c9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE