Static task
static1
Behavioral task
behavioral1
Sample
48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807.exe
Resource
win10v2004-20240226-en
General
-
Target
48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807
-
Size
14KB
-
MD5
c872bad09b5f02564d00eb1c2732ff79
-
SHA1
1b6a029d3934aad61c4111aa79c56ba38fd6e92a
-
SHA256
48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807
-
SHA512
ba6d5f9c1e47b8d8c6933680eb295b6aff5562e5b8c27f1306e29ed774bc1a72a1e856a55b3722f2257c97e408630c633e01732040bf1aa9100c05e4059848be
-
SSDEEP
384:m6JnkUiGHO7GYYYYYYYfMxMxMxMxMxMxMxMO50/K+DE045HxA6A6A6A6A:BnDHuoooooooLKAvA6A6A6A6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807
Files
-
48299d70e1c2333373837a92752cdaa1815adbe12550bb64f3a201d203006807.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ