Static task
static1
Behavioral task
behavioral1
Sample
56327eea576dae68d7d0129bbb822f16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56327eea576dae68d7d0129bbb822f16.exe
Resource
win10v2004-20231222-en
General
-
Target
56327eea576dae68d7d0129bbb822f16
-
Size
432KB
-
MD5
56327eea576dae68d7d0129bbb822f16
-
SHA1
bfd67f9609daaa4adddd9531a67d6471f1da6f0b
-
SHA256
ce375c47f8855128a5447e1f7a515426c5ce8ebfb484bc47a9d8a6aeaf78cb07
-
SHA512
82bd6f2dfb40241b1b63cc0c6a116529f8ac8f6fa0431e1e1664a3f5687fc5c4decfc2a51e37653688696a22c0bd7fffe9ff27e6557341cca8e812b73a9b88e0
-
SSDEEP
6144:WqkrTSDN5/l2cP5cFJM/ZAhYvurD/2awzewJyZoLjTgshKh3UUD6EhKMmZlkH:ATSJRl2cwxbBwzaZgTgOKhn6EUMmXkH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56327eea576dae68d7d0129bbb822f16
Files
-
56327eea576dae68d7d0129bbb822f16.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ