Static task
static1
Behavioral task
behavioral1
Sample
48bbfb0dabb317e0a119d2a0ca8231f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48bbfb0dabb317e0a119d2a0ca8231f3.exe
Resource
win10v2004-20231222-en
General
-
Target
48bbfb0dabb317e0a119d2a0ca8231f3
-
Size
512KB
-
MD5
48bbfb0dabb317e0a119d2a0ca8231f3
-
SHA1
ab25c4201d21890a01513ce0eccc3253fa5f3eb4
-
SHA256
2e9e3b5d19eed6b0bc65a72258082113d4e59dda1c9e74b6babe225f465b0cbc
-
SHA512
1164d8cdccfe24c76b829cd44c6454f20941164b7e67488b1e162bd038c2cede9186afe38726cb7bd0dade77a8215af45d0c72f8a71bb93400b348bf7bd57eba
-
SSDEEP
12288:W/HArx3FwcJ3+B+T8I4SBovMuzu1yWSq4PirIg:W/HO3FwcJ3C+T8xSBYBc4arR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48bbfb0dabb317e0a119d2a0ca8231f3
Files
-
48bbfb0dabb317e0a119d2a0ca8231f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE