Static task
static1
Behavioral task
behavioral1
Sample
049ebfb1a322585add9327493e990d00.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
049ebfb1a322585add9327493e990d00.exe
Resource
win10v2004-20231215-en
General
-
Target
049ebfb1a322585add9327493e990d00
-
Size
494KB
-
MD5
049ebfb1a322585add9327493e990d00
-
SHA1
26343ed129e403d2a9585717abbcd7f1fcb07f08
-
SHA256
dd2fbc7dba9365913635d0991dc306230ea210cd88776d9a7d740b624c90b6f5
-
SHA512
6a885103984fb495c64b113e09ef56aa835d6096916e6c0cf9f53959197d7bc8efeb92e7c5baab62a263cfb720be4eb16ae97b4a61f75615ed7ce79bde1fb82c
-
SSDEEP
12288:OBfPUJFneSNvle9jtj0M0m5xlPKLtLoTEOFDBR8tLoCyq+PnuirZfszSX:SeF1NitjvnxliJLoTVTR6Lozqc9rZfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049ebfb1a322585add9327493e990d00
Files
-
049ebfb1a322585add9327493e990d00.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE