Behavioral task
behavioral1
Sample
656b0688f6e37c1b6b966966204909f2.exe
Resource
win7-20231129-en
General
-
Target
656b0688f6e37c1b6b966966204909f2
-
Size
784KB
-
MD5
656b0688f6e37c1b6b966966204909f2
-
SHA1
35ac2a9c8133499e8d39bd771e206e677b86e117
-
SHA256
941c4924dc68140195660e9764a75936f5fb7a3bfdf9158ff05360eee351567e
-
SHA512
ff97239868de533fe42f223b815ee76045e8d1ade2cb003d1263279a1f3cee929f16be0b0a749df036ac8332f7e3c4c4c5143c52c975f6a862d2ad8a5824964e
-
SSDEEP
24576:qG8/uZwBMAESBuJsI8Ir/w0YJVESF4z60RuK23C:/8/uZwKAE0HnZrESF86zK23C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656b0688f6e37c1b6b966966204909f2
Files
-
656b0688f6e37c1b6b966966204909f2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE