Static task
static1
Behavioral task
behavioral1
Sample
49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569.exe
Resource
win10v2004-20240508-en
General
-
Target
49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569.exe
-
Size
35KB
-
MD5
b5bcaa11dc8901fc4ba9541c70f66a00
-
SHA1
ce2e00230efb1aa0929d0bae2f0844d9d8d77ad6
-
SHA256
120efb3d3ba98763fb8e4244580596e8c30171b163bd4e12f27e3b92e3a4ac07
-
SHA512
5d687a4924ef4b04d6db2faea44d295d06bab7e489ea000234057af8a78ed812ef496c4f0e54233f72671dab8768073dbf04e2732546d77ad0becb33663fdd78
-
SSDEEP
768:Q4OH1YUR5mG4ADB/QsopA1yShFXBk6xfQl6oM10Jzxmm15n4jOc:rOh5m8DB/pK+yyFXBk6xfQl6+YmPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569
Files
-
49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569.exe.7z
Password: infected
-
49274f2e30f083399836ef76f87b198a30f8256c32d24125ef6f78adddded569.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TCB Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 43KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE