Static task
static1
Behavioral task
behavioral1
Sample
56e40ca16bbeb296dcf97c0b174c7c84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56e40ca16bbeb296dcf97c0b174c7c84.exe
Resource
win10v2004-20231215-en
General
-
Target
56e40ca16bbeb296dcf97c0b174c7c84
-
Size
94KB
-
MD5
56e40ca16bbeb296dcf97c0b174c7c84
-
SHA1
cd63e95759e1c23edf4ce9b878027ba2021b6319
-
SHA256
e9c0e16e33f469d4045fb2fcf91e0f60b22778aa9dae393d1d204775d7d032ac
-
SHA512
c7c9632e9693a59a9c5dcf952e462d3f1618bf5581c93344b13c73195e989b1d7445bcdfaa332c274988b219decadda5fadddbd1f31173d4410ac88c3ccc9529
-
SSDEEP
1536:ae8rDnm2SfRhbUGJsdm+eYLrABwaNQB/hNjLM+bKOwDlXJ9jlR2ulkNPXD8m:R8rDmffR5mrVLrt1B5r5wNfjlR2Fgm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56e40ca16bbeb296dcf97c0b174c7c84
Files
-
56e40ca16bbeb296dcf97c0b174c7c84.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24.4MB - Virtual size: 24.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ