Static task
static1
Behavioral task
behavioral1
Sample
449264b76b1e08c37de39e614b92049d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
449264b76b1e08c37de39e614b92049d.exe
Resource
win10v2004-20231215-en
General
-
Target
449264b76b1e08c37de39e614b92049d
-
Size
523KB
-
MD5
449264b76b1e08c37de39e614b92049d
-
SHA1
49bd348a438dd064dfa56c016fcb62444a1ed1e8
-
SHA256
0b31b7e5d2cb145daf269538b2f42d949ec0e8d6323828155c1c7123fa0dcb32
-
SHA512
b84ff9912a142c478621a48799a72ee72a48963257b21d1125d15823340975761e661009af779ec9b6c4a7b76b54ee60c3842ada1c5d2cff617b8b52ba47638c
-
SSDEEP
12288:FN+DWNQ+ctovVeUcHiHaNahaVADFF9J4fSynaQX1:FNzNQ+2ovQpQhaVADFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449264b76b1e08c37de39e614b92049d
Files
-
449264b76b1e08c37de39e614b92049d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ