Static task
static1
Behavioral task
behavioral1
Sample
1a48ac591c56720412fadb32d8da41d0.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
1a48ac591c56720412fadb32d8da41d0.exe
Resource
win10v2004-20240226-en
General
-
Target
1a48ac591c56720412fadb32d8da41d0
-
Size
564KB
-
MD5
1a48ac591c56720412fadb32d8da41d0
-
SHA1
c5bb5c4389a1764fae2ce910efd00ad12e68dc70
-
SHA256
7bdd0d26e90cf58fe668e1e054b84dc7c9b9273eef088f850d36d32bf69e95b8
-
SHA512
455df124a4f03086e91a0f9ecc2bf199c9f5306c60e241740a6c59b1126f56d783c3a817118ea1fe689bc11af1b4491215ed38f8a3fbef881bba8ec3438cef35
-
SSDEEP
3072:qWW8RinudiP52xx67lLdQiHDo6FcFmKcUsvKwF6Yp6Q96IuzSe5VdzBQ19p6FcFc:qakgiPA6ROPiUs4HQ9Luz/5P09piUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a48ac591c56720412fadb32d8da41d0
Files
-
1a48ac591c56720412fadb32d8da41d0.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PGllPZFG Size: 4KB - Virtual size: 4KB
etmQYOzq Size: 4KB - Virtual size: 4KB
NkQDFVfl Size: 4KB - Virtual size: 4KB
BzRWgoYq Size: 8KB - Virtual size: 8KB
WZWPbjOL Size: 4KB - Virtual size: 4KB
zheByWMr Size: 4KB - Virtual size: 4KB
DVisYruV Size: 12KB - Virtual size: 12KB
AlHQobmf Size: 4KB - Virtual size: 4KB
jWJDgZrN Size: 8KB - Virtual size: 8KB
ywcYPteW Size: 304KB - Virtual size: 304KB