Static task
static1
Behavioral task
behavioral1
Sample
48bd96e7154c5d22f5c7529c6dd8b7f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
48bd96e7154c5d22f5c7529c6dd8b7f7.exe
Resource
win10v2004-20231215-en
General
-
Target
48bd96e7154c5d22f5c7529c6dd8b7f7
-
Size
1.6MB
-
MD5
48bd96e7154c5d22f5c7529c6dd8b7f7
-
SHA1
0064c5b21f06bed57fe03b16cf1efaffb0ea0386
-
SHA256
df103339a6dafb1ad24e0418965f08d7c1491da5d28fcafe3a504f651c012b04
-
SHA512
744bb42584e9a17b5a4d100ab820ea9e34bde8a63c63c40677b15408b2b982f49afb62cdc7b4010266808c7300da1adc89979c6375a53bb008ce139aae7d1e81
-
SSDEEP
24576:nqLS/d3UYdkb7Mb+8w/qx/YNTSlzPdVsC9+8EUUWbmwEGPoN7vdiTbnFM3:NM7Mb+8P/xtUeLEcmiPoiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48bd96e7154c5d22f5c7529c6dd8b7f7
Files
-
48bd96e7154c5d22f5c7529c6dd8b7f7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ