Static task
static1
Behavioral task
behavioral1
Sample
4149ff9a49b8452a34a96f387ad65804.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4149ff9a49b8452a34a96f387ad65804.exe
Resource
win10v2004-20231215-en
General
-
Target
4149ff9a49b8452a34a96f387ad65804
-
Size
607KB
-
MD5
4149ff9a49b8452a34a96f387ad65804
-
SHA1
17ddf8c51365abf7940375109c2bf59745006a26
-
SHA256
fd24a68c09b7f4c34207bf156d52156f89dbc4c0cf40233f7ecc8572556bc009
-
SHA512
b86b83318c1dcbc62fcc505c016ce8d254bd4b01df4036d21ddb6154f4dc8f91cd44cd563c17679478db75e8d321cc8c93f08d7dbc12217ba06a21d93758511c
-
SSDEEP
12288:TeDtQicVJj7+O3hEHVUBmZ8S7uJdPYSOoS8oIqRP7Qc:aDtQlJ3XRE1cS7oPLqRDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4149ff9a49b8452a34a96f387ad65804
Files
-
4149ff9a49b8452a34a96f387ad65804.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ