Static task
static1
Behavioral task
behavioral1
Sample
560a4d691bf7e1c53e4c10c084b13696.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
560a4d691bf7e1c53e4c10c084b13696.exe
Resource
win10v2004-20231215-en
General
-
Target
560a4d691bf7e1c53e4c10c084b13696
-
Size
1.1MB
-
MD5
560a4d691bf7e1c53e4c10c084b13696
-
SHA1
3891e7e02c4c3f2114ba12e0550d710a07c4ca26
-
SHA256
368aa087ebaa5e5ba2958fdbe36944ea88a93d1ee39ea1f302ad58e857fd8d76
-
SHA512
479fc4cc2bdc048f0dc64213db715b03b335b8a498b811de59a65a83764a53c06025291eca9bba98569d480e6cd0b93d9a99c599af9fdabd6e24dc1dba053ffd
-
SSDEEP
24576:SypW9SgLNZaOdcTMuUvxIgY/BQuxVJwGQQvCW7afRwEbnq2ycdFP:St9SgLNZa6xI7YGQQfe9G2yczP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 560a4d691bf7e1c53e4c10c084b13696
Files
-
560a4d691bf7e1c53e4c10c084b13696.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 324KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 748KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ