Static task
static1
Behavioral task
behavioral1
Sample
56fce2555da384ca597b3f10a6407639.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56fce2555da384ca597b3f10a6407639.exe
Resource
win10v2004-20231215-en
General
-
Target
56fce2555da384ca597b3f10a6407639
-
Size
64KB
-
MD5
56fce2555da384ca597b3f10a6407639
-
SHA1
cd9ea66541d8c9870b4c146c5169553345aa2650
-
SHA256
f022fa932b20beaa723f3ae25c75afd3eedbd9008edd099986bded81b29220d0
-
SHA512
dfc430fe4bf653adf4bb3b910d897333178fb6f9846ecd2a434b0ab0401288ba14000b513faba3c36cc95edc4e6a7c9d1dd466d72b4006999c135dc03412dbe6
-
SSDEEP
1536:7ZWjCTBiCPKqgJTC24vl9XR86lea78lJO:7ZUCJyq+C2uVle8i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56fce2555da384ca597b3f10a6407639
Files
-
56fce2555da384ca597b3f10a6407639.exe windows:4 windows x86 arch:x86
f2d541e1e83a99adeb1296246e50b964
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileMappingA
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
GetCommandLineA
GetComputerNameA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
IsBadReadPtr
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalLock
MapViewOfFile
ResumeThread
SetEvent
SetFilePointer
SetLastError
Sleep
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcpyA
lstrlenA
user32
AppendMenuW
DrawEdge
EnableWindow
EndPaint
GetParent
InsertMenuW
IsIconic
IsWindowVisible
LoadBitmapW
MoveWindow
PostMessageW
RegisterHotKey
SendDlgItemMessageW
SendMessageTimeoutW
SendNotifyMessageW
SetForegroundWindow
ShowWindow
SystemParametersInfoW
WindowFromPoint
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ