Static task
static1
Behavioral task
behavioral1
Sample
46c875b828e03a9878051cfb26db300a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46c875b828e03a9878051cfb26db300a.exe
Resource
win10v2004-20231215-en
General
-
Target
46c875b828e03a9878051cfb26db300a
-
Size
30KB
-
MD5
46c875b828e03a9878051cfb26db300a
-
SHA1
805db53eca7fd6ea8f098bedac319f0d9e0509b7
-
SHA256
5ba58812c074b56dbdfd92890d1349a75a0c483589c15d4def6dad9e1903de97
-
SHA512
4db34dc7e31772bf7bc57e8689fa08ec73fc230827eecb152880819c570cec28e37a356001f709dec9727f863633184b3345a9a64365cc155741860885b3eb74
-
SSDEEP
768:vbreuJbMUAVCFrbrmDgecnatGDxu91qpIH:vbaomIaDgecxDqq+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c875b828e03a9878051cfb26db300a
Files
-
46c875b828e03a9878051cfb26db300a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 418KB - Virtual size: 46.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ