Static task
static1
Behavioral task
behavioral1
Sample
55d68c8cbd62adc96e9f21263d614911.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55d68c8cbd62adc96e9f21263d614911.exe
Resource
win10v2004-20231222-en
General
-
Target
55d68c8cbd62adc96e9f21263d614911
-
Size
340KB
-
MD5
55d68c8cbd62adc96e9f21263d614911
-
SHA1
978b7e079e2184f0a7fdc920c916bdeafa8a1b18
-
SHA256
464bc35ccfabeafc94b92e4ba8e9ea68a661f77e5cde6718b0201dfd1509446d
-
SHA512
f89f68b255fdb0c04b5f8e8596d4e0ee3618bb6fb8105b9ee2a95e33d372b62564231df3c61e97bd6a39b5d78ef9cec4845c1bbdd32b1dcc00c0a7df94f11918
-
SSDEEP
6144:/xrEmcTGAdUa3UbF50crbHZjb1Vz8JqsPW903O6+ZShfCgAZZ:+sXbF50crb5jb1VgJqZ9XShfC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d68c8cbd62adc96e9f21263d614911
Files
-
55d68c8cbd62adc96e9f21263d614911.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE