Static task
static1
Behavioral task
behavioral1
Sample
55dd6c2632e5033e560b642ff8ce3666.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55dd6c2632e5033e560b642ff8ce3666.exe
Resource
win10v2004-20231215-en
General
-
Target
55dd6c2632e5033e560b642ff8ce3666
-
Size
63KB
-
MD5
55dd6c2632e5033e560b642ff8ce3666
-
SHA1
6ea90090c3c0e398d4c4510a46d1f1480bb1189b
-
SHA256
dde4ac3c430e4a610febd72fb30a669c66defafd6031a4df3f38afd7ab9ab862
-
SHA512
55a82e4aeb43b8cbddb2488024622c110695acfd56b56eeff2c7de93bb2282efbd0be70a1a98d68c5a0214fdc61de2d19053d8235f09d4d748b4be5349693495
-
SSDEEP
1536:QEZDJFL6qeEwHjsT1CkSEjb5f9MN2V8rZ1bOu1Tej:DDJFL6qz6AVSsbTM+GZ03j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55dd6c2632e5033e560b642ff8ce3666
Files
-
55dd6c2632e5033e560b642ff8ce3666.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
YZpack Size: 512B - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ