Static task
static1
Behavioral task
behavioral1
Sample
485e9eaafd27f549e2ec2f3fa401bcf6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
485e9eaafd27f549e2ec2f3fa401bcf6.exe
Resource
win10v2004-20231215-en
General
-
Target
485e9eaafd27f549e2ec2f3fa401bcf6
-
Size
1000KB
-
MD5
485e9eaafd27f549e2ec2f3fa401bcf6
-
SHA1
0be424e86bdb43cc4a3be7a1f585aa67cb53a63f
-
SHA256
33be6849397c04d9fc82f7161dc7f2b8ff306f96cdaca1395edda3a3c5c9d352
-
SHA512
20843ed16eb226a1caaa1e49b0544d02e963d00cf527951984f386cbe1c3015d180ab2e2b80130e25693878b18185ddb5df33eb69c7b440283cf13cba0d9c472
-
SSDEEP
24576:KR+ZHKEre32UNS8sTbU/1B+5vMiqt0gj2ed:Kg5KEi2UNwTbsqOL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485e9eaafd27f549e2ec2f3fa401bcf6
Files
-
485e9eaafd27f549e2ec2f3fa401bcf6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ