Static task
static1
Behavioral task
behavioral1
Sample
482595b6d9c408b4e5095980848a1c58.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
482595b6d9c408b4e5095980848a1c58.exe
Resource
win10v2004-20230220-en
General
-
Target
482595b6d9c408b4e5095980848a1c58.exe
-
Size
549KB
-
MD5
482595b6d9c408b4e5095980848a1c58
-
SHA1
08a8713fbd28ddbb44b2d6d5518073f594041f35
-
SHA256
e98bd4ed05c5d8f05861357156e67cf2eb1ece78e082e39abc9db81be3a408b5
-
SHA512
deb90df6a693170186e9206de695a282a57b79257b03269f2ad7a85339bb8ab3ec07070704baf7024d998915067745b74d41003b5fb8f0a16a1c6c51bb98bcc9
-
SSDEEP
6144:+UD9CiebdnFvgs8YjdbXlNtT8BrLijY0MztkB4IkN3H3qCfoVGqbUW20JbiK56lO:RhqdnF/PbT8BnijaX37QV2WTb/56LA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 482595b6d9c408b4e5095980848a1c58.exe
Files
-
482595b6d9c408b4e5095980848a1c58.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ