Static task
static1
Behavioral task
behavioral1
Sample
a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fdN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fdN.exe
Resource
win10v2004-20240802-en
General
-
Target
a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fdN
-
Size
384KB
-
MD5
1c8d9a0c51ba19bdc6ceedc917a59ff0
-
SHA1
3df5732667eae6010436a21ba4fa6006cd25c26a
-
SHA256
a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fd
-
SHA512
2eb663c5472116882ee7429b5f293a3773131efaa5a7ea7c2674d7b26fd54a1da6852f71134aee5cb18e7171625f9ca6e5b1bebc10d2c7c09265b51a3d2c3a14
-
SSDEEP
6144:V/OZpl5/OZplP/OZplx/OZpl7/OZplx/OZpl4/OZplpBE/OZ8:V/M5/MP/Mx/M7/Mx/M4/MpBE/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fdN
Files
-
a48549ba025b505008a5b26951775565f79d62faaf3c1715b336e8e2c058a6fdN.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE