Static task
static1
Behavioral task
behavioral1
Sample
46c125efe8796caeda09d3b9eb80eb8d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
46c125efe8796caeda09d3b9eb80eb8d.exe
Resource
win10v2004-20231215-en
General
-
Target
46c125efe8796caeda09d3b9eb80eb8d
-
Size
4.2MB
-
MD5
46c125efe8796caeda09d3b9eb80eb8d
-
SHA1
13ddc4273782c847daa228678017668bf30b6dd0
-
SHA256
2ad7074bd868c727458b039b4c6278490e9196d8a90f41ab10bde2cc0af9e32b
-
SHA512
4a3398291aa263e0cab06756f473dbee64e69fcb88b8522f03cfd88673649ff99c3bd135f75ceb9e4315baa04fd254efb692f390b582b189d8367dc545558f53
-
SSDEEP
98304:cIFH3tDdGKQOxOVhnMHLHVfelY+w8hR5Zw8c8nGuE/QAZ4L4Rf2GoM5LUY9j:THfG2xO721feWFf1/oq0cnj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c125efe8796caeda09d3b9eb80eb8d
Files
-
46c125efe8796caeda09d3b9eb80eb8d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ