Static task
static1
Behavioral task
behavioral1
Sample
56f1cd6a4a4173850444a9607ad21009.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56f1cd6a4a4173850444a9607ad21009.exe
Resource
win10v2004-20231215-en
General
-
Target
56f1cd6a4a4173850444a9607ad21009
-
Size
125KB
-
MD5
56f1cd6a4a4173850444a9607ad21009
-
SHA1
6c3b519872a583a7773ccb152e5718787b730f5d
-
SHA256
8dc85fe925135e619e8451088920e3beb3c2b5a9635dbdc4999aca2ceb1c1308
-
SHA512
1cf9bc09dd14bc55e2f0a7c7f474224e35063e8045b8f267887dab6a3493aea5fed7dccf4a3eb2e75053973660f0b62c94057072cf65f7fe7d1bcb565ad8d783
-
SSDEEP
3072:pwUzO1yv9eChqI8eJp8WEKOK9i4vnSY/E8hfbakJY9P:umLkI9JmnKOiSoEkfuZ9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56f1cd6a4a4173850444a9607ad21009
Files
-
56f1cd6a4a4173850444a9607ad21009.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 391B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE