Static task
static1
Behavioral task
behavioral1
Sample
d49d436a70420ad362fcb867af42777d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d49d436a70420ad362fcb867af42777d.exe
Resource
win10v2004-20240226-en
General
-
Target
d49d436a70420ad362fcb867af42777d
-
Size
720KB
-
MD5
d49d436a70420ad362fcb867af42777d
-
SHA1
4b38f7dba5137d15cc947a309afba37c52815947
-
SHA256
ed93ac52ea92852056c9de723b5fa17047b7b298eb3cf8fa1afe0421f6288507
-
SHA512
22f7a34d05701095d26b6df7c5cb9c09c954b134543706d9f83494757a89bb89864e0a7d8496763bb6174a0a15ad030a43172b1624089338bf51198737b50159
-
SSDEEP
12288:gzWWG9doHVaQjHR0go8PjWHtitGZF3Z4mxxzDqVTVOCn:gzpGvwnx0n8PjkyGZQmXaVTzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49d436a70420ad362fcb867af42777d
Files
-
d49d436a70420ad362fcb867af42777d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 388KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE