Behavioral task
behavioral1
Sample
56d1465b0ea60897b3936da048bb5a41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56d1465b0ea60897b3936da048bb5a41.exe
Resource
win10v2004-20231222-en
General
-
Target
56d1465b0ea60897b3936da048bb5a41
-
Size
290KB
-
MD5
56d1465b0ea60897b3936da048bb5a41
-
SHA1
4d9e61a8e135cfcb0fe12936bdf335825cd4b7c2
-
SHA256
faba9d4aacde2cd5f0df9d012546027ae8e28be97f6918305d2a980c2573045d
-
SHA512
f9e2025cab6e11ede8612f4cc5a2f98d283f840ab313ac0db204961bfdb352bcd637de93a8bef47384d9ce2ea07b925df4d093803520cd7875be28d92f8b1881
-
SSDEEP
3072:sr3KcWmjRrzSvr3KcWmjRrzSIp9HDEz3KoCBpZ14qsKX5ivYQpBsLT7UMuMDmN4u:/Q4p9H8I94aRQpBqUSmNSPEwEQlngRXR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56d1465b0ea60897b3936da048bb5a41
Files
-
56d1465b0ea60897b3936da048bb5a41.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE