Static task
static1
Behavioral task
behavioral1
Sample
79849a261078f3e92f20830b48994b48.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79849a261078f3e92f20830b48994b48.exe
Resource
win10v2004-20231215-en
General
-
Target
79849a261078f3e92f20830b48994b48
-
Size
126KB
-
MD5
79849a261078f3e92f20830b48994b48
-
SHA1
30ea252f3eadd277fdf039a20abbe5224be40cca
-
SHA256
7c4d7641acb14f2030f4d4e1d6b25fdb05f38924560ab5b3e1db30dadd1bf7db
-
SHA512
7b86a9bd079a1dee2e635d24af878f67cd87ab4c52b90aad71a33e3b6c21ddd00a7164c130a55791a7209ef23945c6ff3287803165ae9bd92e259801209de105
-
SSDEEP
3072:1yRb1JmywwxbtOEZ3emZxVCo1rBWa0PjQN7JcWSXUzkEl:2+yxRPk6CSWa0PjWO3XUzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79849a261078f3e92f20830b48994b48
Files
-
79849a261078f3e92f20830b48994b48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 125KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE