Static task
static1
Behavioral task
behavioral1
Sample
448fb064aa08f559f3a01da561345586.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
448fb064aa08f559f3a01da561345586.exe
Resource
win10v2004-20231215-en
General
-
Target
448fb064aa08f559f3a01da561345586
-
Size
512KB
-
MD5
448fb064aa08f559f3a01da561345586
-
SHA1
2911046d6b32fde0e74622f8226f7e23b6f45226
-
SHA256
8a612b1d7bbe9d77cf72e313d8db7581b7e9179b5c44932c38b4d3d3c798b58b
-
SHA512
87bc272e9fee5a2b82b1d05b9240a09443d79d05523ba38e6d09bd00583aa618ae90e0f076c317f4e18c22f4ce0ff0a375f3c5b3d9e13c4bf0becb21e0be0d11
-
SSDEEP
12288:0evg2bCJ9mT10rOgbh39mP5LfyceGMpeDgPdV3efCaeQCFd:lvg2E9SiJbh39mP5LfyctMpeS3Fd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448fb064aa08f559f3a01da561345586
Files
-
448fb064aa08f559f3a01da561345586.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 806KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 319B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE