Static task
static1
Behavioral task
behavioral1
Sample
0649e94e1763f1940e82aed8d4e44da9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0649e94e1763f1940e82aed8d4e44da9.exe
Resource
win10v2004-20231215-en
General
-
Target
0649e94e1763f1940e82aed8d4e44da9
-
Size
57KB
-
MD5
0649e94e1763f1940e82aed8d4e44da9
-
SHA1
bea0a7549a4def195ce247a89a736bf9e5eb69a7
-
SHA256
b26620b31f477f847bbb1bca3e3e586148b26a3900ebb925c77a66c82853c300
-
SHA512
f129591059137add5a34b84f5d1c2c013eef8543254ac2a3e11298e43d9a136033a7016d6a372a402563ecb6c16aad99317d12843307d5e6841f62cde23e1f45
-
SSDEEP
1536:jVh6p8PMQ3NXX+rdeb5XHLWxQYZAW4vgwkrGE0:Z+xemQ4mgnt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0649e94e1763f1940e82aed8d4e44da9
Files
-
0649e94e1763f1940e82aed8d4e44da9.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KERNEL Size: 4KB - Virtual size: 1090.9MB
Size: 264KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA