Static task
static1
Behavioral task
behavioral1
Sample
0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7.exe
Resource
win10v2004-20240426-en
General
-
Target
0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7
-
Size
14KB
-
MD5
fd69bb240f5e5cd8980f89a9d71bf3ee
-
SHA1
ab56413831c26608a4dd8f6d004b6b00d5fa6e9f
-
SHA256
0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7
-
SHA512
c4966fddf7fefe9b1db4e07575d1726c65e668f68bed70a440bfb30923d07c6a78ca8d74e6d0ec158201429eae73571ea28a8543647ad150066ae08346c4dece
-
SSDEEP
384:eQgBliHZ21dnjKmLkRx0+riDE045HXdddd:fgBG8Hax0DARdddd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7
Files
-
0491764d62b6d23b2378cfb04b4b2458756afc3bb73a4767681edbeac95a82e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ