Static task
static1
Behavioral task
behavioral1
Sample
4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593.exe
Resource
win10v2004-20230703-en
General
-
Target
4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593
-
Size
3.1MB
-
MD5
8cd443bdaf6550414681ad59a295dd48
-
SHA1
c9d49cd1cf46785a87d99b2aafa538171dccdf68
-
SHA256
4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593
-
SHA512
221b3166d4bc260defff048dffedd2b19d757c2c35cd564ef7fd55c3c7a73badab22fd98498da1a9582c72c55c50210166d26dce44857d728ad0383bb7a29371
-
SSDEEP
98304:50VH8KjX+2PDK08eGpPSpIJEBzs6x+Wz7q:KXDK0bGhdJsN+Cq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593
Files
-
4bb9a151561918ef285e19187f1ef10ef560b4253882f6e7ce07246594294593.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 736KB
IMAGE_SCN_MEM_READ
VProtect Size: 620KB - Virtual size: 620KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ