Static task
static1
Behavioral task
behavioral1
Sample
56a058ddf5c2e9e7de5e6bf8bf5ca5e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56a058ddf5c2e9e7de5e6bf8bf5ca5e6.exe
Resource
win10v2004-20231215-en
General
-
Target
56a058ddf5c2e9e7de5e6bf8bf5ca5e6
-
Size
486KB
-
MD5
56a058ddf5c2e9e7de5e6bf8bf5ca5e6
-
SHA1
e30007988cf65c18c2cfcc1945740211a27315e9
-
SHA256
d33b68736a2f2e95e100c713af9671dbd7ba59298d96dbb7811b2a280c643157
-
SHA512
50fe9d50c34f1355186156a9afa6ba5eb7cb88544f4d6474774231dc120efa51528feae0fdcf44a038219c5164226cfb5a727966611e7b304e92213e35b5eded
-
SSDEEP
3072:e5y4cgST+392pqgqq6Pnn+Ct1SW6x+YUXiyy:cSK3Qb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56a058ddf5c2e9e7de5e6bf8bf5ca5e6
Files
-
56a058ddf5c2e9e7de5e6bf8bf5ca5e6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ