Static task
static1
Behavioral task
behavioral1
Sample
56f3a4d7313b8ff92bccd9f2c4c0f98f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56f3a4d7313b8ff92bccd9f2c4c0f98f.exe
Resource
win10v2004-20231222-en
General
-
Target
56f3a4d7313b8ff92bccd9f2c4c0f98f
-
Size
12KB
-
MD5
56f3a4d7313b8ff92bccd9f2c4c0f98f
-
SHA1
9da198a6e136b67c7bf65de0e173af8c9843c0d4
-
SHA256
4ac32ed4069f35c80931811ee00d649a217151074903dd4aa2deacd1d5c074ed
-
SHA512
d08fbd6a9c1690c6f819062586c5adbb86aa322d4f805e4c0916efa38884a11b59d20b5a9a8590e5a1e62b6a6275d1e72f8124680611709c4dde0c435021bcb2
-
SSDEEP
192:nmR7PKnX6ebYsKZL/gHzjT/t1EgfWpVkjS5K6WPcLkbpoMC6g3nsueD:IPKXxbYsKdgTf//EgOtK6DLyaMfgXVU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56f3a4d7313b8ff92bccd9f2c4c0f98f
Files
-
56f3a4d7313b8ff92bccd9f2c4c0f98f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
code Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE