Static task
static1
Behavioral task
behavioral1
Sample
560bd93aa7a30f38f91a075fe55eb6c1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
560bd93aa7a30f38f91a075fe55eb6c1.exe
Resource
win10v2004-20231222-en
General
-
Target
560bd93aa7a30f38f91a075fe55eb6c1
-
Size
26KB
-
MD5
560bd93aa7a30f38f91a075fe55eb6c1
-
SHA1
aea99f969da1c2bbf7a7762bdeec726f43712dd5
-
SHA256
c6e908e77ad929ca70f5e744e5ddb9d9e85851f855ec2258d36b2031b95cbbbd
-
SHA512
f33077c8c7bffcffde64689ccb0f9e840a823ac6dcf7d379a1dc7de9bdd2d02f7446e73ec8d1c18b371bd3e08b581ed1d87ae9d0998ca12c2b526a47221d5524
-
SSDEEP
384:XfBHjoBNbP7jDx8IeMGPze3XjoPdTnxz7/lzjv56pdvCLX5UerRhrqN3pEXM6:XJ8BBnGIeTPGo9nxX6zEXfdMNMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 560bd93aa7a30f38f91a075fe55eb6c1
Files
-
560bd93aa7a30f38f91a075fe55eb6c1.exe windows:4 windows x86 arch:x86
b876114877b29a61f9955d83081f159a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord516
Sections
.MPRESS1 Size: 23KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE