Static task
static1
Behavioral task
behavioral1
Sample
49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354.exe
Resource
win10v2004-20230915-en
General
-
Target
49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354
-
Size
7KB
-
MD5
f0a784ccfa7526a757ea9bf3feea58b5
-
SHA1
c4e75b919f37a34684818f5f5f070abc88fcd334
-
SHA256
49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354
-
SHA512
99ca741447ce7f8cbb6c719cd57865363a1143bedd1bace955d68914d3f90571f138cee30051e23fc57bbc77752c93df992c6191d13a3d19aa940d19251934d7
-
SSDEEP
96:55wh8+RK3hqXMh1WPTT5Dszi/KtOK5uAN0Pg4+9VTDZmZXjKTbe27dc7y4q8vZuR:Pwq+R01HgpDkftO9aDMMe27dGS8vHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354
Files
-
49da884de3e3042daf59e1bd84b5e7f2d9ce0748cd38cafae9d7f21479803354.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE