Static task
static1
Behavioral task
behavioral1
Sample
49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992.exe
Resource
win10v2004-20230703-en
General
-
Target
49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992
-
Size
48KB
-
MD5
e3124d7f2dcf0a8fd8b5faa4c321a0b1
-
SHA1
d591798162643d3be763071d7f9d5abddf131a52
-
SHA256
49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992
-
SHA512
2d4a4a8899d0d9cb9170301536c9f0f703cb6bcc16cee804d241adf411ed8b3258a51b74743d81d3600998eac5c18b7fd24e50a3a7e95d2a77cd2910e3704777
-
SSDEEP
768:FTdV35V3tV3/MN9h36y4U07DzfzXDzx+WRg3CuAJB4nRvKZa7:FTDwMDnLfx+/3BAJB4nRvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992
Files
-
49d331de334c3fa481a7084095eb69abec4769e5c870d5e5364179e528291992.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ