Static task
static1
Behavioral task
behavioral1
Sample
56231922b05033a42bf78a9c61e35698.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56231922b05033a42bf78a9c61e35698.exe
Resource
win10v2004-20231215-en
General
-
Target
56231922b05033a42bf78a9c61e35698
-
Size
296KB
-
MD5
56231922b05033a42bf78a9c61e35698
-
SHA1
2b53d02a75472ff02407c215588164463ab8ae00
-
SHA256
f440f634b5fef21ef5a043ff554a8e31269af30979d276b6ff54b7a23f3b01f9
-
SHA512
1fae3cdd05ad6ba7501199c69fef0045463c47c45521acd9155ed6a49c7c42845fe12e372fe088a99f229b72ab45c8304e63cb89a88af573fdcdf5082d94680d
-
SSDEEP
6144:FE0yP/p8ncBieOMuW86ZrveI+nBZD87oLzxfcCCGx8mLKTwFmp/:tyKnc4DMPZrvB+O7oLFESx8mLKc8/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56231922b05033a42bf78a9c61e35698
Files
-
56231922b05033a42bf78a9c61e35698.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE