Static task
static1
Behavioral task
behavioral1
Sample
249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8.exe
Resource
win10v2004-20230915-en
General
-
Target
249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8
-
Size
493KB
-
MD5
e34442d8e1a0afb9623579ca2e125821
-
SHA1
4d865349c7a85e1c9656000fce8eb427ee0893cc
-
SHA256
249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8
-
SHA512
86402805aed89f069d6fab1605442cc5e487b36970819c11010a1c1ef8b2b067827eefd60b471ef698b11f5f4b3cbbc19631f74dcf77a70f9527285eb68808c7
-
SSDEEP
12288:y+YCjW+Ne7w8wzcgVUqduXDggZJEBPPz5:y+xlXBzSDggZWBF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8
Files
-
249c00446d38d9ce9cc0a0cf87a4b7e6f95a0b3c6e65a2d4257bb47b973452f8.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE