Static task
static1
Behavioral task
behavioral1
Sample
493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7N.exe
Resource
win10v2004-20241007-en
General
-
Target
493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7N
-
Size
821KB
-
MD5
0c3f410657027294a73267558b7dee90
-
SHA1
f0230de5d8fc486fa829c473991b7723c2e0101c
-
SHA256
493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7
-
SHA512
da37d12632354d796eaeee1d5cf56cbf3cbb8bb1518498e34d0bd4bb64f63239e25632d7650d5b3e92c447b40c18b68cb04179a198e80d451bba867abfed1e9f
-
SSDEEP
12288:UT+W6wZoLGH5d6705Labn6u6fHeW7nZlI0FmyX2xN1tTmKJLZmN1SaEY:UTraGH3b4bgdnTI8myX2bLZmN1SaEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7N
Files
-
493b0465090fffddc3d1438b2ecfc53db8b4baf005a57e1a3b4019fc73d43fb7N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 440KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE