Static task
static1
Behavioral task
behavioral1
Sample
f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01.exe
Resource
win10v2004-20230831-en
General
-
Target
f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01
-
Size
546KB
-
MD5
e0cfe7feb93fffb9c44bc79c8e470105
-
SHA1
676d40a046e5da6fb1eeffb6092f1a5fc3e68092
-
SHA256
f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01
-
SHA512
c2510858925f3d0ebaa1e0c0415b8589287c105f877876e8e31015b388bbe35edcdca582e4e5ec3a0faff2be7d268b2ed2519d23d1fb3ff5e68337f2ff6e674b
-
SSDEEP
12288:aJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/rWrO5S851o:dGvrY3tcr1R2ydMQULhbeeE7xoD46mJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01
Files
-
f49f6a1c0ca781a54005daeca9a3f630c78368523b2552e075a487c8efabfd01.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE