Static task
static1
Behavioral task
behavioral1
Sample
8049e309a4ce204941c1f7e8f9c9f607.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8049e309a4ce204941c1f7e8f9c9f607.exe
Resource
win10v2004-20231215-en
General
-
Target
8049e309a4ce204941c1f7e8f9c9f607
-
Size
17KB
-
MD5
8049e309a4ce204941c1f7e8f9c9f607
-
SHA1
77cabc5d1f5ea7cf3ef50cb6e3c9b27e4c7bb1c0
-
SHA256
ab3fae1b444523cb10daf13a5cc3aed1894771051d3258999edf7d2211340c34
-
SHA512
671d1bd0135092ca6a6a0346334a433d5a96ff6ed1b6cb7a2d28a366d2349c8234221ca5d05c8e22dea38cafaeacaea29dd9e37a3a1b67519e928e6260be1507
-
SSDEEP
384:1rJCN5W5xsy4f1OFdVj20UCe32p8vGWHC2K7Jx0c5jyplsKrTDhjWeFYP:RX5xd4IPVa0UCG2pIS2YM2uD5jWe2P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8049e309a4ce204941c1f7e8f9c9f607
Files
-
8049e309a4ce204941c1f7e8f9c9f607.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE