Static task
static1
Behavioral task
behavioral1
Sample
c49078acc821293c176bab58ab0c1f12.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c49078acc821293c176bab58ab0c1f12.exe
Resource
win10v2004-20240226-en
General
-
Target
c49078acc821293c176bab58ab0c1f12
-
Size
60KB
-
MD5
c49078acc821293c176bab58ab0c1f12
-
SHA1
8561e5aaa1fe9d27f1f47cda68105c8fe25f5045
-
SHA256
ef3c2c4d9075e352b7632dd276a4b2c44ab7e389804d445c32cf7864a448a865
-
SHA512
1890b3ba0ff62966b4fa559d30cd3853c6021ed0c00f249f762d611a62d90d948283ea39d052ac8be9f49a46ff3fd96afd345b8d18377e95633cc9d1538d44ac
-
SSDEEP
1536:w0KwXb6B3Ra25d6PAxoU5rHf+84W0nAjzSvRNI9cokc:tca22yoU9jzSvcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c49078acc821293c176bab58ab0c1f12
Files
-
c49078acc821293c176bab58ab0c1f12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ