Static task
static1
Behavioral task
behavioral1
Sample
49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c.dll
Resource
win10v2004-20240508-en
General
-
Target
49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c.exe
-
Size
773KB
-
MD5
66d4317ed2687fe8d8fe51ca9c3a8000
-
SHA1
de70a018f1b2d20a7ef506f39bc006cb356cc81e
-
SHA256
49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c
-
SHA512
e761a9f43a4cd9634bb810e750e6b5c841319b6d243ae4aa59a80ba9b4e3b067db1e533cd3d83d0c00765099b8a1afd465ba40ab00a7bb1ce22dfad809726e0c
-
SSDEEP
768:GPWxtmtLTm8imMbqyZRb8TG/jwLVeHA1ovio4mUQ+Nd79qrt+0o1lU:0WxkpimMGyXbtg1wJ3sd785CU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c.exe
Files
-
49def3384f3095ca098caa8c4e76b9d49e84f709dbb84ee9ac0114cbba14fd1c.exe.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 771KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ