Static task
static1
Behavioral task
behavioral1
Sample
849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca.exe
Resource
win10v2004-20230703-en
General
-
Target
849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca
-
Size
26KB
-
MD5
eae0a779c3792397c5adbdae9e231a66
-
SHA1
267acc523480e4dea3e473531776a4bd2e154e58
-
SHA256
849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca
-
SHA512
2664c791aa8ab8b252302cd3d660ba6ab53650f166f04de8be5f24f36b86fcd16f2430862d0f2876527f7584cd6409ecfccfc063112ea89bae46891a268fd762
-
SSDEEP
768:CR1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoL:ifgLdQAQfcfymN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca
Files
-
849a1e3dffa6dd8fe99d9560b1b60c41e03f6400f58b3589fee44340b339a4ca.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE