Static task
static1
Behavioral task
behavioral1
Sample
48d8813156e13119a5a1c09ad7bcc3c2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
48d8813156e13119a5a1c09ad7bcc3c2.exe
Resource
win10v2004-20231215-en
General
-
Target
48d8813156e13119a5a1c09ad7bcc3c2
-
Size
55KB
-
MD5
48d8813156e13119a5a1c09ad7bcc3c2
-
SHA1
37e9cb3d7246407d4312cd0361fff1054ed283d0
-
SHA256
08c07e70af4af09f5b68d6b27ba282fcb1783de8945e9cac42fea4aedf58de37
-
SHA512
83867ea4f5612107ce0ae07705fe14a93bd5dec1dcec7056633d608050d6d7688624f4d40c50adf04235254f1405574eb0e0a6441176941ef108fe2499f7aa41
-
SSDEEP
768:NIeVJONXMEiRBZb3SE8GC9X/4jSTzblGgm7bP0Fd1UyeMMH2PN6ak18dF9yGDUym:N3+fwZbLLCpB0ZEC7QNw8dfBDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48d8813156e13119a5a1c09ad7bcc3c2
Files
-
48d8813156e13119a5a1c09ad7bcc3c2.exe windows:4 windows x86 arch:x86
a56f115ee5ef2625bd949acaeec66b76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sections
.data Size: 52KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE