Static task
static1
Behavioral task
behavioral1
Sample
cd56fc25dd68557c8d4e9646e7101478.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cd56fc25dd68557c8d4e9646e7101478.exe
Resource
win10v2004-20240226-en
General
-
Target
cd56fc25dd68557c8d4e9646e7101478
-
Size
371KB
-
MD5
cd56fc25dd68557c8d4e9646e7101478
-
SHA1
406e153803ac8f24c6e511cbe0c500b17b9f4df9
-
SHA256
82115ccc366938cc1bfdd282b2a94c5f1ac7f9948295a64fe7c00dc1212d407b
-
SHA512
164144ab8d6931270630c4e3e16b2a6bf1ab13258b5e4af1c9988d67b8578db895a591c6d2c832de319150ab71c9113c687f95f105e15a10d13cbf5da344e6f6
-
SSDEEP
6144:D24OelJ9RsF2idZecnl20lHRxp3gOu6fON4nzIU16F44Lr3bVdr4HpVbGAkKNfVc:64fJ9iF3Z4mxx5ZONQp16bbPrKzkKNfu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd56fc25dd68557c8d4e9646e7101478
Files
-
cd56fc25dd68557c8d4e9646e7101478.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 55KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE