Static task
static1
Behavioral task
behavioral1
Sample
48c3200dc89e794c649fbd4b6adf1573.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48c3200dc89e794c649fbd4b6adf1573.exe
Resource
win10v2004-20231222-en
General
-
Target
48c3200dc89e794c649fbd4b6adf1573
-
Size
587KB
-
MD5
48c3200dc89e794c649fbd4b6adf1573
-
SHA1
2b6616118455beed196d17f11ffa577eba4fba50
-
SHA256
e827228c5e2ac1252f9c0f775e0bdfd64c3f31288bbc967b1725d15f18f4b744
-
SHA512
175a4cf469056b78fbee1151fbb15fc410af30c6c460ea2c611fa38bcfaa34e7bef12fbdd7ece0cec95c9722f82823269d6beb2f3dc15e9c860531afa1ddf5d0
-
SSDEEP
12288:s5UDehR1kwZ+8uAmLa7xPZGV88ogxQCpMiG03brRvfO0:s568RE8uAmsLGTzvW03vRvfO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c3200dc89e794c649fbd4b6adf1573
Files
-
48c3200dc89e794c649fbd4b6adf1573.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ