Static task
static1
Behavioral task
behavioral1
Sample
56585e0ce8990f74d16059cf2132d8ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56585e0ce8990f74d16059cf2132d8ce.exe
Resource
win10v2004-20231215-en
General
-
Target
56585e0ce8990f74d16059cf2132d8ce
-
Size
817KB
-
MD5
56585e0ce8990f74d16059cf2132d8ce
-
SHA1
37f8ac7b85aef82a66fd5f0fb8c1fe6bd6355a35
-
SHA256
0f81ed26600f5553a508b27f1fc41e3ae13a796b6ee1f5ea23788b85c6586fe8
-
SHA512
8494f3d9943179e9e74f4befe343a4eb41ce2557e3b8bda518b89aaae1a01a442ce93d3a47e7de7d712f9cb193d05fd98639453d355d4ddce5f74698edf4917a
-
SSDEEP
6144:UZfec9EbXDk6RkCBEKWnmy+g46nmy+g43GFrQZb++tdsHP4+QfI6UsrG1VVE+IdS:UZWtI6RkCBoVIerQZb+md4w1U4umCPZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56585e0ce8990f74d16059cf2132d8ce
Files
-
56585e0ce8990f74d16059cf2132d8ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ