Static task
static1
Behavioral task
behavioral1
Sample
49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5.exe
Resource
win10v2004-20231023-en
General
-
Target
49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5
-
Size
1.2MB
-
MD5
cdb658b55b2835dc89546baccd6b913d
-
SHA1
cbee8b467ecbbd9ad80bbd4b6b0135511c27bae4
-
SHA256
49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5
-
SHA512
01523b9183cc642941d4a830bff9b0caf7e2bcd92b71459b81fd8f4b23368b6de6ef7db21edfeb68d21f39001aedc29f2e24228227fbe6cb2822dc9f1e21714c
-
SSDEEP
12288:fTA/Ne+DO0nbphNz7g2qaNKQmUArJ2K5QQaKkqHm/8Dy31fcYJcfnqeAi9vWgJx4:fee3Hm/ZDJcfqedvW4tImbY6xwlBz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5
Files
-
49279220a3bbd6aad959ab8c3a1e3456d9d7b1b73683e9d12f9e83f62383fda5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE