Behavioral task
behavioral1
Sample
56cdb5116f81985e4f974a3cc9d6917e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56cdb5116f81985e4f974a3cc9d6917e.exe
Resource
win10v2004-20231215-en
General
-
Target
56cdb5116f81985e4f974a3cc9d6917e
-
Size
1.8MB
-
MD5
56cdb5116f81985e4f974a3cc9d6917e
-
SHA1
e3318294d9b207272c7491758a9ceb552abc4cda
-
SHA256
01dcfe8a618aea00297a0ef83d2fb3d2a0c43f3400668f9a83921927ee96fb0d
-
SHA512
b914034377ce3af9894c666f3fd253617bb04720dc15d5de61f7ab9bfbb7d71b43201b9286eb3ce7cfd81492931bd47ffe98abb1c7d4c018888dce47fa6a383f
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqn:SCqm2Jpr0nNM7Dus7Nxi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56cdb5116f81985e4f974a3cc9d6917e
Files
-
56cdb5116f81985e4f974a3cc9d6917e.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE