Static task
static1
Behavioral task
behavioral1
Sample
56779b14edaddc8b1875dfdf89006f17.exe
Resource
win7-20231129-en
General
-
Target
56779b14edaddc8b1875dfdf89006f17
-
Size
224KB
-
MD5
56779b14edaddc8b1875dfdf89006f17
-
SHA1
479ba07dc1c84017a44e8963a3fd90b42dbaf18d
-
SHA256
f188057bf7af0fb7eff29b967b5da00f2904a8097e660fe35d88d893beeffbf3
-
SHA512
4ea1892a89d2bde0d03ffd2fbae2b290a85138145f7197b891792b30c8e2b199cfc93f5b24b8b6b034bf8f6e2eba4cf7e5bb44359993fa75d96b4aba48c2efea
-
SSDEEP
6144:bqXcxLNeHZeEIM2h7PoNXyso8LJijdq49g5pRNE100:kcxxeQEIVklKjdKRq100
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56779b14edaddc8b1875dfdf89006f17
Files
-
56779b14edaddc8b1875dfdf89006f17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PEBundle Size: 512B - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PEBundle Size: 223KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE