Static task
static1
Behavioral task
behavioral1
Sample
f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa.exe
Resource
win10v2004-20240419-en
General
-
Target
f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa
-
Size
53KB
-
MD5
7bf79212cea0679f40273a3b212180c9
-
SHA1
d7ea77f6d509338a9e4cffe98ee8e0c0dd805fea
-
SHA256
f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa
-
SHA512
dac825ab11513cf5a9e326a32ad10cc04a4c0abdcee2ae9535c9ef9137911517136d6b17cadaaa17e14b667c3e625b12c141fd349d909a85dba2aee06d6fa526
-
SSDEEP
1536:lvQoLHjw2iWPKEq7OyX60MXXXcFFFrdddv:lv5Ls27k7OyX60MXXXwdddv
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa
Files
-
f48178b103c23905530ea8322cce447650f8530036898e21b6306496afe6e5fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ