Static task
static1
Behavioral task
behavioral1
Sample
56fcc71b6a56683a7e391143e9a7bbd7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56fcc71b6a56683a7e391143e9a7bbd7.exe
Resource
win10v2004-20231215-en
General
-
Target
56fcc71b6a56683a7e391143e9a7bbd7
-
Size
376KB
-
MD5
56fcc71b6a56683a7e391143e9a7bbd7
-
SHA1
b6d86f6e86054ab536c180ab3625a41f9b55e0a5
-
SHA256
e646bff038930ef0279694451c8e75ae8f61369ddfaa288873da4a073d9581d1
-
SHA512
6f99e9f0c03d416f724c646f3350447a888f1ef9d1eed39c3efd97a8f5aae00871672e917c62171415f73e73ad539a5e4242f61c44211a910a007e2a6bbc77ff
-
SSDEEP
6144:2SnPobDUShUmcREtiUcvpKey4Kkb0c/Fnk06hiqP2NXoiyJmEW5c1xZu9MYR7:VngbDnsREtirRK3LZSey+2NYxM5Cx8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56fcc71b6a56683a7e391143e9a7bbd7
Files
-
56fcc71b6a56683a7e391143e9a7bbd7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 312KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE