Static task
static1
Behavioral task
behavioral1
Sample
485f98f60affeb5262dfd47faa81036a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
485f98f60affeb5262dfd47faa81036a.exe
Resource
win10v2004-20231222-en
General
-
Target
485f98f60affeb5262dfd47faa81036a
-
Size
472KB
-
MD5
485f98f60affeb5262dfd47faa81036a
-
SHA1
9bb8d12f2be246ac4dcdb9d51649204a94f8b70c
-
SHA256
e0ab0eee7958b08ba8bde8b33f7d8ee49480af0da27ab0ad04619eb205c6cdc3
-
SHA512
328b3f40c2429eff88a8b003aecba13c649c1b6398888ec0df0589af97f18f4d972099ab4704abad7b78a78844774f1282992b7825d3694f9a800d7161dc4b14
-
SSDEEP
12288:jSUddbjBwyjM6UhU0TP+MzD5sHcXu/YPu2:jb96uz2U89DSsuAm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485f98f60affeb5262dfd47faa81036a
Files
-
485f98f60affeb5262dfd47faa81036a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 348KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE