Static task
static1
Behavioral task
behavioral1
Sample
49ef8458d1986257c48e774e7c825b29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49ef8458d1986257c48e774e7c825b29.exe
Resource
win10v2004-20231215-en
General
-
Target
49ef8458d1986257c48e774e7c825b29
-
Size
40KB
-
MD5
49ef8458d1986257c48e774e7c825b29
-
SHA1
9329da983ec3d2d142025e2f50c8f7797d9a059c
-
SHA256
d2d5df314e34dfc4f3c1c11bfe329c4fcfe1b29b3a9a660e3b2adad1ad53c973
-
SHA512
03219d0cf0f9952fd6318cca4478948bcad01c5812279ca5c897a873ce472083e49714611f900a234e7f5973c47018fba0d54dc8138cd25ac96e99a784cc9da8
-
SSDEEP
384:P4jwVNR5SQsfXtpFU7JWBzSkoeY6eEI7lttCu3brVoNZAuMhJ:AwvSfXtDUESk903tC8bRoNLMhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ef8458d1986257c48e774e7c825b29
Files
-
49ef8458d1986257c48e774e7c825b29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ