Static task
static1
Behavioral task
behavioral1
Sample
c48dcbed8b276833ce1a7c7994e61ed7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c48dcbed8b276833ce1a7c7994e61ed7.exe
Resource
win10v2004-20240226-en
General
-
Target
c48dcbed8b276833ce1a7c7994e61ed7
-
Size
329KB
-
MD5
c48dcbed8b276833ce1a7c7994e61ed7
-
SHA1
af03c232b700a3f534e33d84eb704a31b65a384d
-
SHA256
870dfe2cfdbf796527d253ea084d96890831a77abe1ae4b31326414f4b94c776
-
SHA512
7319c48b4f8f1a651978b9c5c86656a9f01a90001ab3c11227b9a164ce7899f52271c4c591b5ea83f6ca5f141783249ded517927793ea04123a99f83621be2e2
-
SSDEEP
6144:OEW+F2idZecnl20lHRxp3gYhsV8eP8fAOXgfpJHzDSzjP0uXd+:OkF3Z4mxx5hsV4AOwf7DGj7Xd+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c48dcbed8b276833ce1a7c7994e61ed7
Files
-
c48dcbed8b276833ce1a7c7994e61ed7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE