Static task
static1
Behavioral task
behavioral1
Sample
4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99.exe
Resource
win10v2004-20230703-en
General
-
Target
4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99
-
Size
639KB
-
MD5
a0e70ad3e50c9d3e8e2219082837a9dc
-
SHA1
90a3be995ee8a57cf2c76d40e1045ce3a346c1f2
-
SHA256
4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99
-
SHA512
eed5108b51234e32728d1843e2a2cbce34eef7cefda272b1e3b7d5a6b7c7264ff595e2d5dcdef215bb34fd1525c9dfa0e09ee1069f63962caf5ccb9b5d634855
-
SSDEEP
12288:yQ2Q3dzc7lCZ2fNweLGWPB2On0rNso0HVnteCr77CFP:yHQ3dzc7lCZaWEqps7HdtzryFP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99
Files
-
4ed478f11a7a432c79b0a05d4d3fa9ee8e1464e4085c49c9539799648b0d4c99.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 623KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE