Static task
static1
Behavioral task
behavioral1
Sample
c492a0a13dc806a0a787c5f6ad69813c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c492a0a13dc806a0a787c5f6ad69813c.exe
Resource
win10v2004-20240226-en
General
-
Target
c492a0a13dc806a0a787c5f6ad69813c
-
Size
61KB
-
MD5
c492a0a13dc806a0a787c5f6ad69813c
-
SHA1
1ac05a76c6dc79e3d7ffa3447e5463ad56b77c72
-
SHA256
c1bfeb1bc72dc092d85b3d83c57138e365297bd99746ec5b6499e78c5d31d234
-
SHA512
bff8befe3fd32c8e704c0bb70e20015f17c9d5ae1130626c97298c85d11c88834275d346b88db9bb8cf873437fc6ad4ae403f0149dec6615725eaaac86746922
-
SSDEEP
1536:aADIHxEySnuXJ2tHld5jE6fxWlcJRBy1I3WIAoUA+Ii6:3DIREyguZ2tHdoCxWuJeeHN+l6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c492a0a13dc806a0a787c5f6ad69813c
Files
-
c492a0a13dc806a0a787c5f6ad69813c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE