Static task
static1
Behavioral task
behavioral1
Sample
4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c.exe
Resource
win10v2004-20230831-en
General
-
Target
4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c
-
Size
4.2MB
-
MD5
e411c51b219a4b2d96e6e31fd5ec9d0f
-
SHA1
c6226c1ba921c0002c3268cff6f2848494aa6ef4
-
SHA256
4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c
-
SHA512
e420cd3a95e213a86ff40171c2120714fcc5a7107c89fdf7183392c116da5bf46b952af39276bb64d693de3e7a658bae26879584a0be5788d1f4435b8a2dca51
-
SSDEEP
24576:4xP1Nmm3mdNjEOSjiR6x44cGHvFN4RTIZC9B6/g:4bOIx4FlD6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c
Files
-
4b5a0645c3250f73422ebfa05f38f8c409b489e2819298fbcdc043d4a08e6e7c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.2MB - Virtual size: 25.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE