Static task
static1
Behavioral task
behavioral1
Sample
49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e.exe
Resource
win10v2004-20240611-en
General
-
Target
49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e
-
Size
10.3MB
-
MD5
f6476bfe54356b29c1734672d6c5d15a
-
SHA1
6a0d5f3486dce23d6ba6ee414ab1171602d8713c
-
SHA256
49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e
-
SHA512
2a9b8efea5246978733263300b246076335732f82413cec4b3fd5433e9b127fe2325885d1d7af1e1e737b44986538502e12203f8a3e676e4cb97e7368c607fdc
-
SSDEEP
196608:vAqaVN0ugMPQZZbGwul48q23rmE+txU/LaEUzBOrUk/hAKG1Bne19pAzQ9+:vecugMPQ7b1xxE+cTaTzMrUknG1pg91M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e
Files
-
49c5bedf84ba856d566510b3fb081893e77fbd5cdf297736b4d65d60b985fa9e.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tvbctsof Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lsgbcrzt Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE