Static task
static1
Behavioral task
behavioral1
Sample
56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20.exe
Resource
win11-20240419-en
General
-
Target
56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20
-
Size
1.1MB
-
MD5
fdfc7827fa1616d4a541b40747e3eec5
-
SHA1
b89d3489b50992a75a9dddd82e3b02f547b1cc0d
-
SHA256
56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20
-
SHA512
f87f08e67e97edba4cf84a00c63480db2137dc8bfcf1b3568a67e96f347ce56c174ca8f25e1b01d97603a0701e218a6b1d8da3d07a9d501ffba5cac4d95c9fdd
-
SSDEEP
24576:g1ILUFfG3XEYBPnoief35ff2RbLbyBDOYO5cd4e7:g1IQ0Bo2blYO5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20
Files
-
56b47809f3f692b2704838f840a7baa6293c236d321b6c135f711ece4b4bdd20.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 549KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ