Static task
static1
Behavioral task
behavioral1
Sample
56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9bexe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9bexe.exe
Resource
win10v2004-20231127-en
General
-
Target
56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9bexe.exe
-
Size
637KB
-
MD5
8e0f1788ac8a63e0e428303f3b2a405d
-
SHA1
534052e115b31b54d789dce4649e3b05f6623f80
-
SHA256
56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9b
-
SHA512
9508a0c052f44c48ff18c6fa7a7fda5d7b90f52fbb09654aee5ec3a115426e2de0ab038c5ef93654dfccde3423590d9b8b740fe8b624fbdf7a84fe9c32b7b6e6
-
SSDEEP
12288:YAyQaueH5qYnMZucAGVECGL8uYW9dp6bG6JDMG0vqy4JZlZTzK76IGzHG0w:YAmqz0jGiNYc6bxWGS+jlZq7kzm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9bexe.exe
Files
-
56851dce93716b38e3174d7db81c810a4362c465da06007971c6c6aba43dbb9bexe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 629KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ