Static task
static1
Behavioral task
behavioral1
Sample
f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505.exe
Resource
win10v2004-20240319-en
General
-
Target
f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505.exe
-
Size
710KB
-
MD5
c6fa531b0a07fdbfd769443ad8765cd3
-
SHA1
1990c6585ff3bec01f217ce3fbb31286478e62ff
-
SHA256
f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505
-
SHA512
134da8db39b7e259bf5dc07f2d26b7d7275cc95826607041201f1754d82daed5cfcf118b4570e23ec391925abda2085d3f489c6ba48a73b03a6e16696c4f14e0
-
SSDEEP
12288:HFemTUHNCmt7i0uvxEwIvEAzdP5Qd5+jpEeT9GQwFHc2PfaaUluqx63kqIm:stHNCml/uvmwIsWjUMj1TPo1y/l/+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505.exe
Files
-
f48dfafeefb4b36315d6b8f987df1026d29c102bd24703a08cc4d4d41a483505.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ