Static task
static1
Behavioral task
behavioral1
Sample
4c49e9595d1ae5b8ddb94d294d8f1a82.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c49e9595d1ae5b8ddb94d294d8f1a82.exe
Resource
win10v2004-20231215-en
General
-
Target
4c49e9595d1ae5b8ddb94d294d8f1a82
-
Size
38KB
-
MD5
4c49e9595d1ae5b8ddb94d294d8f1a82
-
SHA1
12f1dd6164812280845e1b80e440b27a2c3c799c
-
SHA256
28eccf9b55fb5339af1e5e4877cd9484d58ee3ca0b57ba6ed2658191b558eccc
-
SHA512
778cfb4e5939026505199338f71b6644d1f3666bce85ec497c11b2b427e4cf9911eed91b76f964c17b910cf316b080e3b6c8d72f1c896c7621f3263d0e8de29d
-
SSDEEP
768:UJ9wi3tEqrAA9K8qEsYbMzaaAY6s9gW+FJ:wUkK89q1AYv9gWm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c49e9595d1ae5b8ddb94d294d8f1a82
Files
-
4c49e9595d1ae5b8ddb94d294d8f1a82.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ