Static task
static1
Behavioral task
behavioral1
Sample
56493b8b944f1104cad4e3517d51ed8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56493b8b944f1104cad4e3517d51ed8b.exe
Resource
win10v2004-20231222-en
General
-
Target
56493b8b944f1104cad4e3517d51ed8b
-
Size
48KB
-
MD5
56493b8b944f1104cad4e3517d51ed8b
-
SHA1
e77235eacada506fe2be486c407ace376cbb5799
-
SHA256
207b86a54782294cdaa598c2e1808557163522840b2ed7609b63ec942777e018
-
SHA512
87f5115ca0cae21bb71af35df56863b5e46ef4922bbdb83603b1d50108df057f6e4eb255d22a9bd4eb362967b5346bc874c28781c7256f564a9303bf50c7a620
-
SSDEEP
768:GEzJXVosKKKUm7xE1Dah/BG08ka7B1OkDIKOdLcdIj9tt:VYTUm7xe05G7NDIWK9tt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56493b8b944f1104cad4e3517d51ed8b
Files
-
56493b8b944f1104cad4e3517d51ed8b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ