Static task
static1
Behavioral task
behavioral1
Sample
496cf2688157da928d21d0fbe255abd0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
496cf2688157da928d21d0fbe255abd0.exe
Resource
win10v2004-20231215-en
General
-
Target
496cf2688157da928d21d0fbe255abd0
-
Size
14.2MB
-
MD5
496cf2688157da928d21d0fbe255abd0
-
SHA1
52e9ba330449640c705ff6105cd0e19663524cce
-
SHA256
9e7e58f5784d61c046c5d46631ac4dd6b956e6fb92abdaed47f48400efeea75f
-
SHA512
10c40e7b0229428dc09718f31b8a2325535a9bdac37171059b7549c112e2f3c06b20932e36b6d0dc97f5dcbb4db683a938f8065c50192a64e1b173c8f970da0f
-
SSDEEP
768:64DKslB74m0iSNK8KRo9v/8sySi+e4NzhDgCu7:RrlB8ogv/pTjNzx1u7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 496cf2688157da928d21d0fbe255abd0
Files
-
496cf2688157da928d21d0fbe255abd0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14.1MB - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ