Static task
static1
Behavioral task
behavioral1
Sample
498b42527907a01405aaf0d47526d5ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
498b42527907a01405aaf0d47526d5ee.exe
Resource
win10v2004-20231215-en
General
-
Target
498b42527907a01405aaf0d47526d5ee
-
Size
907KB
-
MD5
498b42527907a01405aaf0d47526d5ee
-
SHA1
f7a5f661dbc77000c9b4ee2216556d289f43840e
-
SHA256
79d364403ed0bf21d379936f2663adb2c3e74c6288a8dd2497db87fedc7a3d92
-
SHA512
7f86886fadcf2b4686efb2a407d507e35ebf9e120e624c5a53e9073a521a27cbd2b0ebf79a48cc417af6c5b1a06ea9cf90fd2b1d80cbaf7917dc8d60e3ff5e01
-
SSDEEP
24576:wGyB39e0CjlVIPp0VRLlkA8ZMegta/ZS1:ae06VIPpuRL9tgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498b42527907a01405aaf0d47526d5ee
Files
-
498b42527907a01405aaf0d47526d5ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ