Static task
static1
Behavioral task
behavioral1
Sample
1849fb3f5f2ef0ae8e9c4f280b0b2acc.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1849fb3f5f2ef0ae8e9c4f280b0b2acc.exe
Resource
win10v2004-20231201-en
General
-
Target
1849fb3f5f2ef0ae8e9c4f280b0b2acc
-
Size
97KB
-
MD5
1849fb3f5f2ef0ae8e9c4f280b0b2acc
-
SHA1
b488dfe3a25644c3a52ce9df92440607b18bb222
-
SHA256
9a64dcad93a65ee0b8afd49102a905a600f21af5c4bc4329613f6b11255a1532
-
SHA512
0342ab2cb219ec3792a2309dce50c59233b26ee85981dbc3849f2faecad6aee5958e0ddc02c31042f5f872f9f9bba8a845ee65ac001be02c99fd630df33a9619
-
SSDEEP
1536:5v+MoORizUPliPsm/gL16ZpQGh6MgHN+PhuLGR/11Tv3MoOJ:R+xOMUMPsgQvTMY+PhGGR/11T3xOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1849fb3f5f2ef0ae8e9c4f280b0b2acc
Files
-
1849fb3f5f2ef0ae8e9c4f280b0b2acc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
r+tr+t Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
r+tr+t Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
r+tr+t Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ