Static task
static1
Behavioral task
behavioral1
Sample
491689e8897cc4165a58be03b92bb0bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
491689e8897cc4165a58be03b92bb0bc.exe
Resource
win10v2004-20231222-en
General
-
Target
491689e8897cc4165a58be03b92bb0bc
-
Size
123KB
-
MD5
491689e8897cc4165a58be03b92bb0bc
-
SHA1
7e5ba24669aec6646eeb25dce92d5a154244d4b4
-
SHA256
0b2f71f5a5fadb2840d6fa4831890a971bae22f26ebbed3603a4f5ce239f2288
-
SHA512
46da65afc64df33a30b635e4b35650903a73c6e2adb806af6cd5a65bff48e678bdf932a3cfc58abf6724986074c6bb921c8235fd55ec5f3c5684198ee25b0af3
-
SSDEEP
3072:E3z13+PpbNSegGlhc2y5KESkODCYJOez3K1W+/cbv62U:E3p3+BRS5GlPyVYoee8Zbi2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491689e8897cc4165a58be03b92bb0bc
Files
-
491689e8897cc4165a58be03b92bb0bc.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE