Static task
static1
Behavioral task
behavioral1
Sample
55364643d040b533a423e4e2a108f020.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55364643d040b533a423e4e2a108f020.exe
Resource
win10v2004-20231215-en
General
-
Target
55364643d040b533a423e4e2a108f020
-
Size
48KB
-
MD5
55364643d040b533a423e4e2a108f020
-
SHA1
552997508dd17275075a49706ce02297e73404ea
-
SHA256
a5dd8597ed64229aa7e2ba21786033c5d91bc71c54481b63dca8568baac4c74a
-
SHA512
a330b621582d7a423f99338aae1ade74ce253e1593f39a7d3875c1a8d6ba2f2061744cb963e94878132eb60f38282faee43919b46804ec8021dd8c865bbec794
-
SSDEEP
768:3T8HuaV4wvqO2dTn6XV8E6e9N/PVBjRIdd2KltnX94k6y3OdJ2/6MhK:34Ou4oqh680JK32dql6YK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55364643d040b533a423e4e2a108f020
Files
-
55364643d040b533a423e4e2a108f020.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE