Static task
static1
Behavioral task
behavioral1
Sample
48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6.exe
Resource
win11-20240426-en
General
-
Target
48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6
-
Size
1.8MB
-
MD5
b83f8dd5aad8ad55581003d0b7f25df9
-
SHA1
067f15e3a367c4ae1729f3bd5385f7a0012783de
-
SHA256
48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6
-
SHA512
545b4c054a5b316ce774f6fcf4011a6c3854d20c8023c3095b35dcbf2478a1c8090ea9b0b54280fe6ff906dc2ff31dec04ccf45d48386c7007545bbf007c099f
-
SSDEEP
49152:oAooCQDbMYiM+CnB0Q66k6vsVZrTpQxxEg:yjQDbMY4CnB7dkMsVZ/pQxC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6
Files
-
48c45119267d6f6e1ea4b9f0ffeee4b742d5d2cdff4fc48da713ca4d85bb2fc6.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmmvufro Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gsnbwxxb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE