Behavioral task
behavioral1
Sample
b56f2d3571f96fce21ba2121e5a395bc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b56f2d3571f96fce21ba2121e5a395bc.exe
Resource
win10v2004-20240226-en
General
-
Target
b56f2d3571f96fce21ba2121e5a395bc
-
Size
1.3MB
-
MD5
b56f2d3571f96fce21ba2121e5a395bc
-
SHA1
9c4960a8d5755e46f0699842ad8277f65c5e6992
-
SHA256
f8caf84c7431d59e08f3a7668f4862ddfe7aef855e0f857e3b57f302a8f06394
-
SHA512
1c3a5d1e201009f705c95416389f9abcb4ee5d2ce444cfde7a11f1856bcfb6984fb9f65083c799b89793ceb7713fdc366978c0cd1699c56f1cd9e5f25ae77cec
-
SSDEEP
24576:ln14qty3rlVLgIlHGhLWj6U1NMUFwhTb4RfloujKhY3jjBHCtghFuGCvG:Iq6nmZWeo7ihTbofloujKWCEp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56f2d3571f96fce21ba2121e5a395bc
Files
-
b56f2d3571f96fce21ba2121e5a395bc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE