Static task
static1
Behavioral task
behavioral1
Sample
49f0046dcd9f372afdeeafad885becc0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49f0046dcd9f372afdeeafad885becc0.exe
Resource
win10v2004-20231215-en
General
-
Target
49f0046dcd9f372afdeeafad885becc0
-
Size
14KB
-
MD5
49f0046dcd9f372afdeeafad885becc0
-
SHA1
07f840041bd612287bbcc34e0f4ecf1584af3f62
-
SHA256
6f40f518c7e125d7c96179b057f10917e99f5b2373f86ac5fda017493a775268
-
SHA512
b5c3c05eceb6e5d52c46acb14b30080055ee0d4ce46bc120e0c514a073e778af84addd609577ff042851aac536484c50ad10682c4d133d76724dc8b3b9e07052
-
SSDEEP
384:eHgFit3fyNa1J+29B42ve/4KrXFWXKEQDZZp:eQit3fn+2ReMKEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f0046dcd9f372afdeeafad885becc0
Files
-
49f0046dcd9f372afdeeafad885becc0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe�� Size: 37B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkh Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE