Static task
static1
Behavioral task
behavioral1
Sample
49C263CB7F866AF803448412D698880F.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
49C263CB7F866AF803448412D698880F.exe
Resource
win10v2004-20230220-en
General
-
Target
49C263CB7F866AF803448412D698880F.exe
-
Size
2.9MB
-
MD5
49c263cb7f866af803448412d698880f
-
SHA1
226c6fcf359e11ac5708e9798104bc1be6ad509e
-
SHA256
10a474a45cfddbe7dfca5a2d0dfde6ce7d4182b6a4a0295d4c43063950057119
-
SHA512
9d5b0516660764c723f8aeff128a15be9c9be6ac4e5526f3c2e2566126c65257f04e17df6c953efc21e2586e71da1d37a4782290fc07531b9da24b5e635bf26d
-
SSDEEP
12288:/eaZYae5oOvqL9kxApB/LbhaBFNIP7r9r/+ppppppppppppppppppppppppppppd:/Qj5oOvqL9kKzbhay1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49C263CB7F866AF803448412D698880F.exe
Files
-
49C263CB7F866AF803448412D698880F.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ