Static task
static1
Behavioral task
behavioral1
Sample
48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86.exe
Resource
win10v2004-20240802-en
General
-
Target
48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86
-
Size
11.5MB
-
MD5
0f1c98976ac350e012faffd02c178fe8
-
SHA1
0828987ce03782040876ac6b8581c29adcfa824b
-
SHA256
48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86
-
SHA512
766183669cc107bc7918c95bb17b795c627e24824591b6b4e8f1dde9badbfa51f60f7523638278f937827f4a5577e06fecdbe09409be74737c5a05141d7da7e6
-
SSDEEP
196608:tdtBjIDKWOYjqV5M39IFT/CRvj0vKlUPjtjoS:tdXIDjqVm3Y/u0ylUr9o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86
Files
-
48bbd696e07847abb60bcc4d4e19ae6ba82289f2d23241fbfd6f3e6ed4193d86.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 748KB - Virtual size: 747KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 31KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 6.6MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE