Static task
static1
Behavioral task
behavioral1
Sample
56ac1552239a7ceb52269cd08dfac491.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56ac1552239a7ceb52269cd08dfac491.exe
Resource
win10v2004-20231215-en
General
-
Target
56ac1552239a7ceb52269cd08dfac491
-
Size
357KB
-
MD5
56ac1552239a7ceb52269cd08dfac491
-
SHA1
637349f0c567efdbf8332da43270d9e5b9660888
-
SHA256
15edc2a622bddd4ab12ecd6f29f21de2f4fb7ac54ad3c373c36553ec1e793e40
-
SHA512
445f822140e6d0a96dd2a7ffd7581fc65eb686a097b0bd17012ee392d8fcc0b28663f4095b342d2db99aad8407f2e2f43cf8e11a6b55bf8c647592ceac3df46b
-
SSDEEP
6144:WUEg57tDYl0PiXJWly2CvBXKeqqAQ1mZT4eAatPePUu+:WUE+7tElei5Wly2CvtKeZm0HapK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56ac1552239a7ceb52269cd08dfac491
Files
-
56ac1552239a7ceb52269cd08dfac491.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE