Static task
static1
Behavioral task
behavioral1
Sample
49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2.exe
Resource
win10v2004-20240910-en
General
-
Target
49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2
-
Size
89KB
-
MD5
4bc5c876d2d9d2cd6d861bf2112cfc55
-
SHA1
4cc0d429e1418dd9d69e16d4ba35c425de75a4f2
-
SHA256
49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2
-
SHA512
115f856df0b30443a66ea988c953d5970b327a7f0b69ca0d4cafd79bbac51d89d68d33e40611b5e2c268337c89bb979d69ac67759785b2d548cf58fd6171ef49
-
SSDEEP
1536:loHseEtOZ2l3CGUPxHCL5qmPVhUm9Vah18JkJZxa+/b61colExkg8Fk:G+o8zUPxHPYSvikLxaQb61colakgwk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2
Files
-
49df3c7690f1b48606c1b0f9c9424516bef14aa1a5d189154f6b588ff4a314f2.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ