Static task
static1
Behavioral task
behavioral1
Sample
2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c.exe
Resource
win10v2004-20240419-en
General
-
Target
2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c
-
Size
14KB
-
MD5
6e50a9b75a4fb9ffa39b670b9e48038b
-
SHA1
6f725e95b4b63a422e53133f035feb49523a6a33
-
SHA256
2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c
-
SHA512
cfec1feec4db818c7f8c2d9ed5e3512ef03b79c32b42a40ac67fc920247aa465bcd1fb4e4deaf9ce3267d3c0ce28848f78a2f2bc30615f108a91d6378e8665c4
-
SSDEEP
384:rIzugdIDCdddddddyRRRRRRabEw1VaDE045H:rIqgdxdddddddyRRRRRRaARA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c
Files
-
2846a4201942e58873d7892ba83a67f02949fd734e5462e0525d8a5ac34e0c8c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ