Static task
static1
Behavioral task
behavioral1
Sample
48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c.exe
Resource
win10v2004-20240802-en
General
-
Target
48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c
-
Size
208KB
-
MD5
6219bb4b56cc349c54dd175685ba068f
-
SHA1
7a8339b8b798963b864fe6ade8f17cc05aff4056
-
SHA256
48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c
-
SHA512
531f5bb73582dfa9ae63e0378c605c3fd70f72483ac5d2a55d40efe5e2b71c4ee6b16a220b10bcbb97fe33e007595f82e9db9ea5bdbc735306a4ed200bdafc07
-
SSDEEP
1536:d3qD3qRLK2Q0SJWkBcCpYQNpUW77uDdvxv3qD3qRLK2Q0SJWkBcCpYQNpUW779DH:LLPTB0ViQbIDdZhLPTB0ViQbTDdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c
Files
-
48332dedc66a27de0ec97ada78994216531eb6d8c22e76278e06c81f7de1881c.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ