Static task
static1
Behavioral task
behavioral1
Sample
56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50bN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50bN.exe
Resource
win10v2004-20241007-en
General
-
Target
56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50bN
-
Size
96KB
-
MD5
236232b19ba4ba9aa8d2c29c5c5f7400
-
SHA1
97fd16ed7f6bcf95eece48e7536a2193d1c38c8b
-
SHA256
56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50b
-
SHA512
35a6acb38fcfb98613e4ed0eb089e71893b30a0dfd856204fd91ff38e6e3f68ee8e3f83cd76bc451d4772c990a415adf259ff8d9860d6cc3e4b621793ef4079a
-
SSDEEP
1536:2fjXqFN1jLfV3ywDn6SCxgXQdannUxcTW/L3JOQvFtiTi1C7p/BOmD1CMy0QiLiY:AqFN1j1nvQdannUxcTcQPYCd5OmhCMyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50bN
Files
-
56cc4f87f667fdf261c091c5c206b79b6c73f3470446d377f640ab53e2fba50bN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ