Static task
static1
Behavioral task
behavioral1
Sample
55e5479ac4b260f129be06949df476e8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55e5479ac4b260f129be06949df476e8.exe
Resource
win10v2004-20231215-en
General
-
Target
55e5479ac4b260f129be06949df476e8
-
Size
35KB
-
MD5
55e5479ac4b260f129be06949df476e8
-
SHA1
607559d81d762833f0f45dbbd8d5e756dca2bf48
-
SHA256
75ed2d3e73f355ad41bbdef82c9dd28f19d5064231bcd7f4f98efb8fbc431dd4
-
SHA512
c79d0f7522f6465ed4f105f4a9b4519bc1eeb96b664393e47cbd0773d0d4a0f776b14870d4515b260d72cd6cb624f5ce1010fed0c6afd8f13b302773fa64cb2c
-
SSDEEP
768:TaAShbgbjkIYf/76/3KUdOR2tRjkZkRjJ5sJvdXw0OHbBHVKn8:TaAS9gZYrS1EDZVZF7O1k8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55e5479ac4b260f129be06949df476e8
Files
-
55e5479ac4b260f129be06949df476e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
jvfl Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jvfl Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE