Static task
static1
Behavioral task
behavioral1
Sample
494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017.exe
Resource
win10v2004-20240226-en
General
-
Target
494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017
-
Size
14KB
-
MD5
6026327654b4394442a7205d755733a8
-
SHA1
c7eb78c6542539692472ce4d4b7f9f8aecfa59ce
-
SHA256
494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017
-
SHA512
e61ebeefd9629fbecadbe744c41a839de10d5478a25f9697769dcd0d0abb931ef673e58e44dc2a5ffa9c3977d3022cefa2bc4c853fb874fb200a8d0070059214
-
SSDEEP
384:lIaqnGws/ZZZZZZ/FQoQoQoQoQoQRSNHyDE045HDMMM:itGH/ZZZZZZ9rrrrraSdoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017
Files
-
494fe305e44460de5021330f99dbe99a7030d59ff048904a57753f58b2762017.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ