Behavioral task
behavioral1
Sample
56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543.exe
Resource
win10v2004-20250314-en
General
-
Target
56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543.exe
-
Size
3.2MB
-
MD5
9ec5cf784ec23ca09c2921668912cfeb
-
SHA1
4b9c8b0d197c359368164e5738b44a65fba40741
-
SHA256
56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543
-
SHA512
043d623ae8f3dbb43b504ba08d916f27f9054c4df46c6b5d0ae56e98c44b919e8d9a05e333c08adad286353bf5f6f1b75c1ee23f819462654c94e1542c31c464
-
SSDEEP
98304:f3bOTeskaH0XNniR5aAebmGeCpmC7ir4:/bOT1kaHeaGe87
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543.exe
Files
-
56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE