Static task
static1
Behavioral task
behavioral1
Sample
4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904.exe
Resource
win10v2004-20230703-en
General
-
Target
4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904
-
Size
1.6MB
-
MD5
adb6d49445dead807e1cc410cad7874a
-
SHA1
58950335c24a8e72b293f8e4da727fc42cb64071
-
SHA256
4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904
-
SHA512
d1b349bd0258ff47b17c35c1b859aa5d15a6ce860caa405b25a1fda9d21db71aa71ce06e05a1a529430dd68de12bb3b445f243c03af13351c7a04a363235f6e4
-
SSDEEP
24576:EJbBVxxZTrs2O9fIpd2a42yr70Vv07bfV76F3dZDa3Cb2byC39bnakLwyhJ:Kp82O9fqB0lcF3dtaSCrLR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904
Files
-
4fc2c895c4c70f340977120d1bbc2b4e2924659d5e6560f15d06069737679904.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 143KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 968KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ