Static task
static1
Behavioral task
behavioral1
Sample
0492c40b6efd098d0a2b4c11ace732f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0492c40b6efd098d0a2b4c11ace732f3.exe
Resource
win10v2004-20231215-en
General
-
Target
0492c40b6efd098d0a2b4c11ace732f3
-
Size
747KB
-
MD5
0492c40b6efd098d0a2b4c11ace732f3
-
SHA1
d516094d4724e9c5e35fdca4acf7c4e455d73070
-
SHA256
2587624c67180d15949c185c9de9ec029663f70b276610d3615156b84688195e
-
SHA512
ea6a88c5aa108bf2852204f6ce17d35f48b59717816f5ad6958739d5435ff0ea6df359ed2f7ad7e7082480fcd1a7642b6c86fd2b5091854892afd4be39b73602
-
SSDEEP
12288:foCuX31tvrf6q7HWwN9qg2GS6RxXAr1/1K6941mKGKdb9Q2N0jLry:fbuvrf6q7Bb5dk1tFsmKGKdbX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0492c40b6efd098d0a2b4c11ace732f3
Files
-
0492c40b6efd098d0a2b4c11ace732f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ