Static task
static1
Behavioral task
behavioral1
Sample
d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2.exe
Resource
win10v2004-20230915-en
General
-
Target
d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2
-
Size
2.2MB
-
MD5
454e5b2156e4e4af2739991bc919bcb6
-
SHA1
7c5b47973e09630d4d9cd2b56ceebf5aa5747b49
-
SHA256
d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2
-
SHA512
2433330bae9325c3dd470b1297e7e7b7863616be6320587d555a35c13178a4c71fff65dbd76363d04645160f5d165275b31bdab3f82221f0fab5c7298325c855
-
SSDEEP
49152:3XY4WGdxWUh9lAuGfy1RysaorU4DYQBP6Xh9eXKEjrULGyVhoe1TQOot0FyIuMWI:3XNTSRfmUQO8jqtCITQvOFy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2
Files
-
d046eda1e33d30865120cf934e50d2cd91380c52b6f2ed88ea69e16806d194d2.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
hkRX Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y2cq Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE