Static task
static1
Behavioral task
behavioral1
Sample
48dbe8108153292dabeb1f32aace0fee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48dbe8108153292dabeb1f32aace0fee.exe
Resource
win10v2004-20231215-en
General
-
Target
48dbe8108153292dabeb1f32aace0fee
-
Size
2.9MB
-
MD5
48dbe8108153292dabeb1f32aace0fee
-
SHA1
d7806de2312409cba0bfa83e80b5da6da3806ad6
-
SHA256
1de68b3328a35c4f4dd87a13fd1bb090e6f22497b3b07d245fcd9b4e61cccf1f
-
SHA512
b022f21f4fdf8f1a6400b6a8712656b518bf4f17cdbdc07d67ad4276ddaa8b55b26ded03ec2b2eb0dc17c868261478d453a9cb0844c0bf6bcbc6cfafa0a6e218
-
SSDEEP
49152:siRi488XiVYNv8h/2xICpyX1/d9IKTjjZHvkSxhTnXUOhy5q/O4Dp4J2lRdguF:xziVY5M/4Zp+VTjjZswEohIJIguF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48dbe8108153292dabeb1f32aace0fee
Files
-
48dbe8108153292dabeb1f32aace0fee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE