Static task
static1
Behavioral task
behavioral1
Sample
55f67f577876e5a4beefd74687db5688.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55f67f577876e5a4beefd74687db5688.exe
Resource
win10v2004-20231215-en
General
-
Target
55f67f577876e5a4beefd74687db5688
-
Size
9.1MB
-
MD5
55f67f577876e5a4beefd74687db5688
-
SHA1
5f47201236330b976f8fd37c6757291e147aaac6
-
SHA256
e936962f4278f00c454aab1e7bbfeb905277b6ba8269c7d2d0294fdcc67ae758
-
SHA512
cdb11d8cfc4e9c5222801f847099d30571d5908971bf80a3f760f898478c8e7932246929aee6e99092bb328fc3ef42b886c19cb1a514071eaa8e9152ed7242d6
-
SSDEEP
196608:AEfiyFDlnaTcZdPPzCFBu7QDihCNHxBTOQga08V3cFqq:AGlaTGPPzk+Yb63ajQqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55f67f577876e5a4beefd74687db5688
Files
-
55f67f577876e5a4beefd74687db5688.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 23.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8.3MB - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 188KB - Virtual size: 188KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ