Static task
static1
Behavioral task
behavioral1
Sample
55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c.exe
Resource
win10v2004-20240226-en
General
-
Target
55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c
-
Size
35KB
-
MD5
d27e3e4216af4eec9d9358f4d88e57cc
-
SHA1
3c8db8dd7a171f24d69349088624a9e6f6b2c056
-
SHA256
55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c
-
SHA512
6f60556d64c5505e9d8f3e08911ae6000e52398e74140bb6e594e9d3f419531aa575c6e18fcc667474427c7c5532856d060b5c4e4116b1bcf7392244aecdca89
-
SSDEEP
768:YUWJg2VizMIe7tfxAbyWWAHzB4N4COoef9ZBDhdrOLrjpAAGkSk85cE:2Jg2ViQB7DWtaNQoef9fzrGr1AMS7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c
Files
-
55875b324f86f112adfaad5b5f4b5c3a8028e02a9dd6f6372cedd96a26afb81c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ