Behavioral task
behavioral1
Sample
56126c399b032d914a5b87933bc63596.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56126c399b032d914a5b87933bc63596.exe
Resource
win10v2004-20231215-en
General
-
Target
56126c399b032d914a5b87933bc63596
-
Size
93KB
-
MD5
56126c399b032d914a5b87933bc63596
-
SHA1
2e1b38ae428f5277922fff9a9f14540b4f94e84d
-
SHA256
330b440edab7d8d003697e3b1be2b219fd1ccea2381aa56dc5e718068d0d95e9
-
SHA512
f8e50db6f92c28aa2103393be6aa0edca3de4d19f169e0ff9025439bc98a750e50cd0e8beb54da663c1a416d28913dbe4456b293a6e92e9b24083fb7e4b9b817
-
SSDEEP
1536:SKcR4mjD9r823FaH76i3Soak1msrHCAxHcCBOmuxINz/sK+4B7+nf5+d1oBmDu8b:SKcWmjRrz3MH2oak1mwbxHZBbuxo0K+g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56126c399b032d914a5b87933bc63596
Files
-
56126c399b032d914a5b87933bc63596.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE