Static task
static1
Behavioral task
behavioral1
Sample
0d56f4bc508556b12f070c7fb35309c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d56f4bc508556b12f070c7fb35309c6.exe
Resource
win10v2004-20231215-en
General
-
Target
0d56f4bc508556b12f070c7fb35309c6
-
Size
47KB
-
MD5
0d56f4bc508556b12f070c7fb35309c6
-
SHA1
483e5cc331be10a7fd18bc818121e0082451b5e7
-
SHA256
751e90ff3721555f0f026295228c523e2f8c8bab4b80535d482b118a4e26f1f8
-
SHA512
ab3ccde4c1257e065ea3ca75d04bde6689f4ae2945a1e2ee097f331b7da4f922604a86501692eb61722031dc9f4152707b30464cae60ca6050c1af113306c4af
-
SSDEEP
768:sgpRB9wSujWuAWlA/cfUdbrR89lITA/2+KBjug4hrCV3dRv0TUIvL6tVr/hMQit+:sgp2WCtUdbN89r25tGhubR8tMr/Kp2J5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d56f4bc508556b12f070c7fb35309c6
Files
-
0d56f4bc508556b12f070c7fb35309c6.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ