Static task
static1
Behavioral task
behavioral1
Sample
046fbe8f0e3dfc07539b9c9fa4f0691a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
046fbe8f0e3dfc07539b9c9fa4f0691a.exe
Resource
win10v2004-20231215-en
General
-
Target
046fbe8f0e3dfc07539b9c9fa4f0691a
-
Size
18KB
-
MD5
046fbe8f0e3dfc07539b9c9fa4f0691a
-
SHA1
814812f7539719b3366c6d86e52e8e51ae129f91
-
SHA256
01d1fc24ef8227c50f3dcec03d12c08a17dea502e281c403f9dd8c6accf0241a
-
SHA512
40f3fe1b7632514377265448047c73e72a28f4feeab250fbfa46f768c23cdc37e499da67f36303e401932f0a9a7bc6b84525f1939c5acc0d8ebdabcb5816b456
-
SSDEEP
384:h/Rp2vDynU8rihSwOWR8u7sKYdVRbRuuXf:5P2eUCuSSuX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 046fbe8f0e3dfc07539b9c9fa4f0691a
Files
-
046fbe8f0e3dfc07539b9c9fa4f0691a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ