Static task
static1
Behavioral task
behavioral1
Sample
d49a56334120c501c6693d045754cede.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d49a56334120c501c6693d045754cede.exe
Resource
win10v2004-20240226-en
General
-
Target
d49a56334120c501c6693d045754cede
-
Size
506KB
-
MD5
d49a56334120c501c6693d045754cede
-
SHA1
ad8b9abc5e827e0b866f92b1bf27ecc92188c8cb
-
SHA256
0b2e908ac808f6a286ac09696ed8a1fa0dcdbe9bc08980955b8de0361963666e
-
SHA512
8ccbf9ecd246cda0a5fd3bfb259fe55dac5367f31ba8ea20b9e275654b3ee1fa8a2baf9cd9fe4ec9c6045b5994d1d81406806e4de098c042d42dda71c168a7d0
-
SSDEEP
12288:C8VOXqDMDImCRF7WSm7kNWcGQ0D51pvynvELcXOt+lu2m:CweqADSF5mINWcGBJQR4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49a56334120c501c6693d045754cede
Files
-
d49a56334120c501c6693d045754cede.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ