Static task
static1
Behavioral task
behavioral1
Sample
490fcdd16df383d8086924582295cfba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
490fcdd16df383d8086924582295cfba.exe
Resource
win10v2004-20231215-en
General
-
Target
490fcdd16df383d8086924582295cfba
-
Size
10KB
-
MD5
490fcdd16df383d8086924582295cfba
-
SHA1
80a843cc0184f362adca155a5603de938ea8477c
-
SHA256
7e371fc849afaf01ff1cf618368b577278305002ea0f0d39433c4dc9a9b56965
-
SHA512
cc3f7d2f51f1dbc8914c41fe25b6001c99144d2112ebd3027316fd5950d10145c79f23c5474691b93016fcc419aa126735f7ba74c2cb54e1e086ec090cf93372
-
SSDEEP
192:aN4ipCtxN1V7LjmvRYn9FNkSQOX/R9LHHBUZBphW:aNJULV7Lj+RA9vXJdHBUZB/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 490fcdd16df383d8086924582295cfba
Files
-
490fcdd16df383d8086924582295cfba.exe windows:4 windows x86 arch:x86
d64316aca8f69e2636ef0af74aba9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
Sections
.text Size: 512B - Virtual size: 45B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ