Static task
static1
Behavioral task
behavioral1
Sample
02246947eafa13e1da834c680a14593e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02246947eafa13e1da834c680a14593e.exe
Resource
win10v2004-20231215-en
General
-
Target
02246947eafa13e1da834c680a14593e
-
Size
1.6MB
-
MD5
02246947eafa13e1da834c680a14593e
-
SHA1
46053edd835f94975e369fbfcf2897b6ef57b42a
-
SHA256
42498c04fb99cc5221e020854b12936acde19fc52c350bd399e75e616c1299c4
-
SHA512
86f75a380b3b7d5c29e182b5083421c09851826235ec60d86d43c5cb7cb2c6198b571ebb3b27ab002b6d7d4e9b7ee320eba2cf46460c20000c47c7f35c28f432
-
SSDEEP
24576:U9yujwMW9Tl2KRNyFEVnRbMTAI7ggw7u8wWqzwnhPjkefOJCv1cEykpZyyagkd3E:8WpMtZROvBJ8UqYcE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02246947eafa13e1da834c680a14593e
Files
-
02246947eafa13e1da834c680a14593e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE