Static task
static1
Behavioral task
behavioral1
Sample
56793fceec3bb9a0acd43e3f9d5c1cc0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56793fceec3bb9a0acd43e3f9d5c1cc0.exe
Resource
win10v2004-20231215-en
General
-
Target
56793fceec3bb9a0acd43e3f9d5c1cc0
-
Size
25KB
-
MD5
56793fceec3bb9a0acd43e3f9d5c1cc0
-
SHA1
ae37f7c1d8addc0a154535b937fb66630b339f3b
-
SHA256
8dc91ebbf3af895f6736672e03724376eeae1e2b0940057a6fbb6702d389fd6e
-
SHA512
e339949d98de4d1fce137fd6ea702622dde115aa25e633462944a28cf6c38076c26ffe1c3d32514ed134c535c12343f7e9cf5351562055a5b9af855374f971d9
-
SSDEEP
768:+trBpiQ1FEKy4yvObTxKpAyfoD9Ji69r6:+txHy4XTxKp/o+2r6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56793fceec3bb9a0acd43e3f9d5c1cc0
Files
-
56793fceec3bb9a0acd43e3f9d5c1cc0.exe windows:4 windows x86 arch:x86
827284f4a7a2ce33e5407ece162f7a64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExtendVirtualBuffer
GetPrivateProfileSectionW
SetConsoleNlsMode
_hread
FindCloseChangeNotification
_hread
EnumSystemLocalesA
CreateWaitableTimerA
GetCommProperties
DisconnectNamedPipe
FreeConsole
SetConsoleIcon
HeapCompact
SetLocalTime
user32
LoadRemoteFonts
GetMonitorInfoW
ReplyMessage
SetMessageQueue
UnpackDDElParam
GetClassInfoExW
PrintWindow
GetRawInputData
OemToCharW
CliImmSetHotKey
DefFrameProcW
DdeFreeStringHandle
GetScrollPos
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ