Static task
static1
Behavioral task
behavioral1
Sample
2849d0f58c847f129ce505506f35e9c87c09df01b6269b24c57ffa25deca4a4c.exe
Resource
win7-20240221-en
General
-
Target
2849d0f58c847f129ce505506f35e9c87c09df01b6269b24c57ffa25deca4a4c
-
Size
65KB
-
MD5
bce0b6eb754da4132aafc9889cf7525a
-
SHA1
518b8f6ef5acee28d6bce634f6d6232025e84f40
-
SHA256
2849d0f58c847f129ce505506f35e9c87c09df01b6269b24c57ffa25deca4a4c
-
SHA512
a5e52e94a19691007477a0cac68a1ec9e8ac1b00c6a729486c7b384dd3b288bb7ec88f924058d0d9a862a8f7a32fda383d3b1aeeb02c07cb68e0135a4f40fa10
-
SSDEEP
1536:VpkpyyVNj9FrT3i/Ek10vhsFtN+zOI6vnL6cDXNwz5lj:fQrV5H32Ek105sFqiFLbDmlj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2849d0f58c847f129ce505506f35e9c87c09df01b6269b24c57ffa25deca4a4c
Files
-
2849d0f58c847f129ce505506f35e9c87c09df01b6269b24c57ffa25deca4a4c.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE