Static task
static1
Behavioral task
behavioral1
Sample
49d0e9c0f44585b86e8f7b593e99c802.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49d0e9c0f44585b86e8f7b593e99c802.exe
Resource
win10v2004-20231215-en
General
-
Target
49d0e9c0f44585b86e8f7b593e99c802.bin
-
Size
638KB
-
MD5
49d0e9c0f44585b86e8f7b593e99c802
-
SHA1
44a1779fa85c55f20a1498de71e3b3b047ec8db3
-
SHA256
70ab1fddd149d8ed04a0318df09d6434303810029d5dd7cd11ef6108e54d278f
-
SHA512
fa4e07883c568bb0b686d8c9e763a657857914107cd0ca62790dc7b2cf098d7dbdbcbc07ea30c4af6bb962ccea2d034966021b65363bbc00c61267803ae8ae95
-
SSDEEP
12288:szX8xULJkf2iM7rJ4syL+8DJzJ8WOkoI1FOdm1c2obY7poiLfKyf96ud63K:sAWLxd4syLtDkWmI1FOdEocSohkuMK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d0e9c0f44585b86e8f7b593e99c802.bin
Files
-
49d0e9c0f44585b86e8f7b593e99c802.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 374KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE