Static task
static1
Behavioral task
behavioral1
Sample
46c1e84c262428bdcfbba764ae2fd72a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46c1e84c262428bdcfbba764ae2fd72a.exe
Resource
win10v2004-20231215-en
General
-
Target
46c1e84c262428bdcfbba764ae2fd72a
-
Size
444KB
-
MD5
46c1e84c262428bdcfbba764ae2fd72a
-
SHA1
0157abe24e2ed8fc0e131c74f3ea23e6720b0d92
-
SHA256
75e6828100d74ba1629741307654643d0a8f7c9155b11651f8fcd9eb8ca3b9ba
-
SHA512
56dc85262b0d4285f3e828e2253203b36d0aa655bbe2db7dcf46d99c5b407bf385c0fa5c074093dc1cbe53228b1493f79589f0512d6202b329de8a197c101882
-
SSDEEP
6144:wT4jJRwYYlbLJ0gqUMTbwooaexnZ0BIw6X0SwVvjjvT4jJRwYi:hjJ+YU0ZLYZOMX0SSLIjJ+Yi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c1e84c262428bdcfbba764ae2fd72a
Files
-
46c1e84c262428bdcfbba764ae2fd72a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ