Static task
static1
Behavioral task
behavioral1
Sample
48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195.exe
Resource
win10v2004-20241007-en
General
-
Target
48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195
-
Size
4.2MB
-
MD5
78a905367ca551f8254aebe4d8ab9e2a
-
SHA1
37b6d5191b35f3d7ec0e54cb119f2a03f78619ae
-
SHA256
48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195
-
SHA512
942b28015c0a2727ca8c605a57fa4784525dc08fde7c383663387f1fec5fa33aaa732f0c1cd56ab77184d235ac632851c02fc01ed34e2cbefb5c5c241116547c
-
SSDEEP
98304:5co2kZr8oM4PdclHmSHwFwpxCf2wyQJFJ339E/JRU3:b/h/MvZdwF6xCf2w3H9E8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195
Files
-
48aea0c073f0e645cff9265faaaed114c8e826f9394be9be2477c8c3e9d11195.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 183KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 35KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ