Static task
static1
Behavioral task
behavioral1
Sample
4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e.exe
Resource
win10v2004-20230220-en
General
-
Target
4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e
-
Size
4.7MB
-
MD5
e5917bfb2ee29a99e7ee0c35dc5f125b
-
SHA1
29fa1858903dd6c201196b9310626831812a6fe1
-
SHA256
4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e
-
SHA512
809fdff066fb94c4260ffd29276b4c436e05ac04eeb57ec7afcd3e6b1dccb81eb40834a36098d52f3b3dcd9d1510041cf2a6c4c17a59a6a32f54204575b31739
-
SSDEEP
98304:GBhfsGWWYQMh2XCGwvQKbjnGpnwwKBQNxLK1DG8bGtZBbCRpyHz:shkGHYQMXvdOpw7BQ7O0Igzury
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e
Files
-
4796a78eb0f1bb2d148e2cb50cc77a76688791303b8fc1b8414d3c267f48099e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 584KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE