Static task
static1
Behavioral task
behavioral1
Sample
48ca1bdfb2d72805ce5277e7381a39dd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
48ca1bdfb2d72805ce5277e7381a39dd.exe
Resource
win10v2004-20240426-en
General
-
Target
48ca1bdfb2d72805ce5277e7381a39dd.bin
-
Size
6.4MB
-
MD5
48ca1bdfb2d72805ce5277e7381a39dd
-
SHA1
f2f6eaa91263aea0545ca04fbd4e4aff510d96d7
-
SHA256
b70f324f44c77e2e33d1eb584af14b0f9980694abdb1d9f644ba642c6a61f5ff
-
SHA512
4b897b0de568475213906d09de67c2973300ade1e9bde361eadd869232495d96a5bdd907f009fd73ff06a06b952acc4559eccbd22bdde2c3df5829d5b82f14f6
-
SSDEEP
98304:sb8vR8F3Lir4JSqRksNZeAOVoHGfHcITrNSDCUenJzve/nFcO2U1nduTgq+Jkk:sb8vR8F3L/Sq+sjrOmH0HTrNtJzvvrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ca1bdfb2d72805ce5277e7381a39dd.bin
Files
-
48ca1bdfb2d72805ce5277e7381a39dd.bin.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ