Static task
static1
Behavioral task
behavioral1
Sample
55b2d2922a0c166c03f646ae56465676.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55b2d2922a0c166c03f646ae56465676.exe
Resource
win10v2004-20231215-en
General
-
Target
55b2d2922a0c166c03f646ae56465676
-
Size
364KB
-
MD5
55b2d2922a0c166c03f646ae56465676
-
SHA1
79aa62bfd6cb342bd7748f72e6c63e85288293d6
-
SHA256
5de9d217a8e9690b1c2d6763b8bee03e34add3a3347c59757fdaaaa09e8516da
-
SHA512
e326a875ff80c2579396cd8d584cdbacfe2efba4d6e840c52a0fa1b10c761da41860ce588cc6018ee0f0fcdfa6e224ccf628f0540dbc1acda58ae07fe0f531b5
-
SSDEEP
6144:QrLUzTO3Wrq0HpGH6ZecE7nKGm2A5f4Jujon999Su3kxa:rzTLdxe1n/mSuo9ic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55b2d2922a0c166c03f646ae56465676
Files
-
55b2d2922a0c166c03f646ae56465676.exe windows:4 windows x86 arch:x86
91323fbf2b892052c0f5f22da49d9680
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
FatalExit
FatalExit
FatalExit
Sections
YADO Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YADO Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YADO Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
krypton Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE