Static task
static1
Behavioral task
behavioral1
Sample
f49abfc6c5992875c5d292937b6e7130N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f49abfc6c5992875c5d292937b6e7130N.exe
Resource
win10v2004-20240802-en
General
-
Target
f49abfc6c5992875c5d292937b6e7130N
-
Size
50KB
-
MD5
f49abfc6c5992875c5d292937b6e7130
-
SHA1
f9da5da1ccf799dd5a91a13a54734cb989e46307
-
SHA256
e64fee2420dddf780d18aefd4251aa82076ae7d8fc28b82ff0f002a79a50da46
-
SHA512
5571de3747b86b87c6995a5fea31cdda12f5fc83440c98b9c22f0168afd56b19b1f51575748074e6d39ed4458465b30b56d27268eee7c05039dc8c1d57c1d553
-
SSDEEP
768:hvQ5qDLHRdw2iPSMEk/6KMvu571xBmPU96cyXH9zlll8555g0:hvQoLHjw2iWPKMvw71/RLyXf0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f49abfc6c5992875c5d292937b6e7130N
Files
-
f49abfc6c5992875c5d292937b6e7130N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ