Static task
static1
Behavioral task
behavioral1
Sample
49ebdee426ca652d26f305f75b6cb8bae62e1be4cae0945a7d6dc97629d89bdd.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
49ebdee426ca652d26f305f75b6cb8bae62e1be4cae0945a7d6dc97629d89bdd.exe
Resource
win10v2004-20230621-en
General
-
Target
f109a02669095b81e0af38063bf035ef.bin
-
Size
433KB
-
MD5
3df6184576e296e749bbb022f42ce03c
-
SHA1
f22df4e6603d26aab3a0f27f3afa92e3151343eb
-
SHA256
c61a0876a561a18556827900f61b583ed162f0163fcdcf85f631c7259cf5b99a
-
SHA512
16a2f0e4f1c4046439c2c75e8a24716f0bebc695132b044a00b7eb912e5e520a967651e0216d41dab224dc25d6f8dd4f5a8a9c266bf7a6fca3b9ab147859c117
-
SSDEEP
12288:YLwQ0xUiXaKtJ6zTj7xxm8Yu8fSiSIiS53SUVS:mwVU0QjtGu4ll5Cl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/49ebdee426ca652d26f305f75b6cb8bae62e1be4cae0945a7d6dc97629d89bdd.exe
Files
-
f109a02669095b81e0af38063bf035ef.bin.zip
Password: infected
-
49ebdee426ca652d26f305f75b6cb8bae62e1be4cae0945a7d6dc97629d89bdd.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE