Static task
static1
Behavioral task
behavioral1
Sample
0848bf39e484965734a7b02cbdd33684.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0848bf39e484965734a7b02cbdd33684.exe
Resource
win10v2004-20231222-en
General
-
Target
0848bf39e484965734a7b02cbdd33684
-
Size
147KB
-
MD5
0848bf39e484965734a7b02cbdd33684
-
SHA1
9f13478f3a3d6e9963687dd270ba9253f1db77af
-
SHA256
3871812d29357632e1a40504fc3c3d1441cba7bb523d5c1f064f2cec8c216435
-
SHA512
c88c33eeb464248ccdb70377caf34526c9ea4546f57dd572f6bf1eb1fe9e169c10809909136c55c21b6cbde51f7b2e867fa8fcfaee6cf67ec0c7a2d52c2fe0d3
-
SSDEEP
3072:bUfAvM/a03hWzQksCExTlS26s4z3i7m39Kk2hSnIMB1/iyKuQqkkrI/v:bUov+fxYepr6/yVk2hndxuEdH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0848bf39e484965734a7b02cbdd33684
Files
-
0848bf39e484965734a7b02cbdd33684.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 479B - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 147KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA