Static task
static1
Behavioral task
behavioral1
Sample
56bbd7ebc11a2756c64f57e03918531c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56bbd7ebc11a2756c64f57e03918531c.exe
Resource
win10v2004-20231215-en
General
-
Target
56bbd7ebc11a2756c64f57e03918531c
-
Size
137KB
-
MD5
56bbd7ebc11a2756c64f57e03918531c
-
SHA1
1dd3e015ce49828260cf6f99c565211a64e1aa6b
-
SHA256
c28789b9720c4799df25fe4da83a936aac04e170969de957bb083cb6c4204463
-
SHA512
86deebaddef8a884e6ccaa06c48e9cd9c0db573fe5616d7cc6849e179f959c992290c8fa3e498866af09ba8f0ec72d0028c6fa15154d7e3b49b4b789ffc620a7
-
SSDEEP
3072:IpWC4YgBPlGiyllypWC4YgBPlGiyllypWC4YgBPlGiyll+:2WC4YgB9GiywWC4YgB9GiywWC4YgB9Ga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56bbd7ebc11a2756c64f57e03918531c
Files
-
56bbd7ebc11a2756c64f57e03918531c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE