Static task
static1
Behavioral task
behavioral1
Sample
49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61ededN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61ededN.exe
Resource
win10v2004-20240802-en
General
-
Target
49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61ededN
-
Size
36KB
-
MD5
1cb2b71fd1ae4818e69b047e9a3254d0
-
SHA1
0fd408c5012f4397b3c8f2dc8b9f8b7ec81af289
-
SHA256
49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61eded
-
SHA512
6bb7f7ac8c08d2b8b98be8eee9f7f6140ba3e9107c175c82ec4de4c8bfa263487db428133132432be31a8f94e7c08d720a90de4afa964580a74ce4730fa2f558
-
SSDEEP
768:nQv/YOZIgQtz8GEkT9oe2lxUCuY9m9e9tdEI2MyzNORQtOflIwoHNM2XBFV7WB78:Qv/pZIgQtz8GEkT9oe2lxUCHCetdEI2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61ededN
Files
-
49a13e61c2c88e538be4ab07ca32c80a2d458d0beb5d2c12fedd27b83a61ededN.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE