Static task
static1
Behavioral task
behavioral1
Sample
4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b.exe
Resource
win10v2004-20230915-en
General
-
Target
4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b
-
Size
298KB
-
MD5
5b861b390e8f4e218e39c7763c422b1a
-
SHA1
a194287f9f67b360a9ad6ac062e944530d4778b0
-
SHA256
4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b
-
SHA512
b8f1c1ab672ac425d6956c95858089bfa1e51636f8c35c51c5d7626a78be8a748ef3221756fff6ceaa17ce85d8a2c1d579c64573081d0069dbc99df7c1d9f45b
-
SSDEEP
6144:DVfjmNrbUARyUgzPcLactVks94DJ9TBA3QvE:Z7+rlwUAPDsyLDJ9TagvE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b
Files
-
4e4781721a8790307d7d001c31a10e7a1c18ad114cdbe869c85042100b8ce86b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE