Static task
static1
Behavioral task
behavioral1
Sample
0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c.exe
Resource
win10v2004-20240226-en
General
-
Target
0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c
-
Size
44KB
-
MD5
64ca3db3ad951992cbea0c181ee8707e
-
SHA1
645a8fe8af660ebbde90aeeed98353f9ace94af0
-
SHA256
0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c
-
SHA512
4d1807eda6da220a498e0448232a1b692fb9f29c0f15e913d134acbfaf82bdac7c244ebc7d49805f927b5fc83659ce5c60b90e46818019ce08f26aacd83d7f96
-
SSDEEP
96:LgeWw0tThHcczBvVC1sHbZ3IsDlPEjXjC/0/lAT8n1hw9sfzMawqhkEkjBghc:ceWtThHcOvVCU9fDxErjvagzMmkEkjoc
Malware Config
Signatures
-
Detects executables packed with MEW 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_MEW -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c
Files
-
0493916ad14f02cb9feaaf8190e930d4a6c5d511a5166699ac9c5c286117ef3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FBA Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 43KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE