Static task
static1
Behavioral task
behavioral1
Sample
49c0dccd14396efcdfb4e010e0ffe2a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49c0dccd14396efcdfb4e010e0ffe2a5.exe
Resource
win10v2004-20231215-en
General
-
Target
49c0dccd14396efcdfb4e010e0ffe2a5
-
Size
409KB
-
MD5
49c0dccd14396efcdfb4e010e0ffe2a5
-
SHA1
c1b3efcaa0d8b038644a5970199e14e68564a0db
-
SHA256
3bf1b2a6dec5e558775be8c918f273f6c9e44c020966fa77a550764134a25929
-
SHA512
7bca6cdfa917fc1c2b03f7a0f4b42d19e53ee76ada84b3caf1071273e25247be7f18d30acef4a129ea909e1992272042499e26e1b0675c645c057d68cd585389
-
SSDEEP
12288:zki9VLZGqvI5X4IcS8mUf/5fA+v8bSBv30:gkPGqgVZ1Uf5vh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c0dccd14396efcdfb4e010e0ffe2a5
Files
-
49c0dccd14396efcdfb4e010e0ffe2a5.exe windows:4 windows x86 arch:x86
f9386adf84f80212d2b2e19af3b77641
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
urlmon
URLDownloadToFileA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 375KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE