Static task
static1
Behavioral task
behavioral1
Sample
49b93608532f8c117590d1a11bafc3ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49b93608532f8c117590d1a11bafc3ad.exe
Resource
win10v2004-20231215-en
General
-
Target
49b93608532f8c117590d1a11bafc3ad
-
Size
256KB
-
MD5
49b93608532f8c117590d1a11bafc3ad
-
SHA1
efd66d8b368b70d63e7d95dbb7728b093746b9bd
-
SHA256
76328407c751e55a21fd85729404e71c2a13a273437bfef0d6b704c973931bb7
-
SHA512
6466fa86c07f10967650b296498046c8f619dafc8249a99e0f4a3a82cea8ea207468c8c1e75d051db5dcb6f4966258100f48eb5ce5c83360346c22d855bced90
-
SSDEEP
6144:Q6wMmK4zn98b8HTGUpRVMaLHJtelDWpzn:hcz98buGyRVM8JGDWBn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49b93608532f8c117590d1a11bafc3ad
Files
-
49b93608532f8c117590d1a11bafc3ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 521KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE