Static task
static1
Behavioral task
behavioral1
Sample
496c1729511b950d869c3c0ce2b93bdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
496c1729511b950d869c3c0ce2b93bdf.exe
Resource
win10v2004-20231215-en
General
-
Target
496c1729511b950d869c3c0ce2b93bdf
-
Size
33KB
-
MD5
496c1729511b950d869c3c0ce2b93bdf
-
SHA1
8df799267c758f2d5047de5ad7fce4331aa797db
-
SHA256
a63113fba14b37ce8cc85b88edb7edb76f89061a280a60d15f397cc34dbd5dd0
-
SHA512
30923a41250a937b233340ca569d142b4054e4cbd72ede5e47d5116591d3593f1d78347027acc5b67e63d7fb7f21431cb2181b9c4b620781e93501876576d244
-
SSDEEP
384:Ml55dlkV0vN8FtziMifayebR8G1ruD9zPQ+j9RQuh/BxOufE+531fU+HCrGUZMyo:uXk7FtzFF1ghI2B5RvXCxyyr19EVzo6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 496c1729511b950d869c3c0ce2b93bdf
Files
-
496c1729511b950d869c3c0ce2b93bdf.exe windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1004B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.v Size: 32KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ