Static task
static1
Behavioral task
behavioral1
Sample
56b35e46ad1ad6103d42aee3bdaef006.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56b35e46ad1ad6103d42aee3bdaef006.exe
Resource
win10v2004-20231215-en
General
-
Target
56b35e46ad1ad6103d42aee3bdaef006
-
Size
370KB
-
MD5
56b35e46ad1ad6103d42aee3bdaef006
-
SHA1
62d1f14373869af21c7e2e25c90acf6ea8262096
-
SHA256
db48b55ac37e4102f1be7b3f510bfb3d73a2404d3e8d6ffcc2723321e83a9929
-
SHA512
6bf28a21074960cacddfa65eeb4f31a86207cdd7fd5e8d2e27773b72a8e418348828e799abc224eb4f401a58a53725e53ff10c3207773b72d55c9382985e5e26
-
SSDEEP
6144:0En8zsMdf3tduTADmUdkew6ivGNskWr0DE6u4i1YAiBpW3als2eptbmd:gzsMdfdduTALw6LZQz6NBpW+s13b2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56b35e46ad1ad6103d42aee3bdaef006
Files
-
56b35e46ad1ad6103d42aee3bdaef006.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE