Static task
static1
Behavioral task
behavioral1
Sample
48ebad1311431775d53415869a7fb685.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48ebad1311431775d53415869a7fb685.exe
Resource
win10v2004-20231215-en
General
-
Target
48ebad1311431775d53415869a7fb685
-
Size
405KB
-
MD5
48ebad1311431775d53415869a7fb685
-
SHA1
417304f3b2e4d72e5e4467bc99704dc965ad4708
-
SHA256
0f27c2e73c3ee4e0961643cedac3fab2a5cac84f782b59b5c085b8666b4cd9e1
-
SHA512
5039d45ba841201a4df2c192dc234b097de9a892fc5676cceebac3b099138cb4c2835a19c278d95bf2063184423e0a4373b9820d6d306ce6b28544fad94b51cc
-
SSDEEP
6144:zICqfH3Y4IF2idZecnl20lHRxp3gHMmqII6SEmW7TcYim1RpWbIMtZ6wB1ep:SIZF3Z4mxxh5P3iT7JWbtfHB0p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ebad1311431775d53415869a7fb685
Files
-
48ebad1311431775d53415869a7fb685.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE