Static task
static1
Behavioral task
behavioral1
Sample
0490d7615bf1559a1e840fffbb037db5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0490d7615bf1559a1e840fffbb037db5.exe
Resource
win10v2004-20231222-en
General
-
Target
0490d7615bf1559a1e840fffbb037db5
-
Size
214KB
-
MD5
0490d7615bf1559a1e840fffbb037db5
-
SHA1
5e32e58393bc00b96c8f24f47f6fd2ac4e3eddaf
-
SHA256
9d4592b375a8b6d2ce238277544c85c1bb14b54b15fb5776ab86ea090bdaad64
-
SHA512
347a5b3d3a3563ae88af70387a74ea0cf35a1bbee831998c82fc27c6d327db596b0be65079dfb1c326087ae5d8c86eb4db4177d69bccdf57204f131790b05be0
-
SSDEEP
6144:zcLcfAAzzRoVjb85pqx/pQVTJLUoa1+1HzX8CUpfpEjQXcPylcYa:zcLcosaVjbD/pQtLOUsLRpiNql
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0490d7615bf1559a1e840fffbb037db5
Files
-
0490d7615bf1559a1e840fffbb037db5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE