Static task
static1
Behavioral task
behavioral1
Sample
4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318.exe
Resource
win10v2004-20230915-en
General
-
Target
4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318
-
Size
3.0MB
-
MD5
4b8101ee6cb6e41953f17a56df3bb9b9
-
SHA1
6f69f4547d17d8d1c815b9422067c3b6e743670a
-
SHA256
4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318
-
SHA512
8d8bb4ac0a9a1d9f11967eaaf4d2bc0f47fbad87970c424ef6bce3d377e3b7b77cd9b776acab9be85c03df6d0f65197d623498c8088b154154ba6c3f1944023f
-
SSDEEP
49152:/n9fguRb2czOCTuJLUl6fr/LO16IouUMNb4PWAcF3dtaSCrL:1fguR2kNTuJ9YP73dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318
Files
-
4e8139dea23027ee2cdaad40f60ca618ed91396b639d4070e6a44ebbd19cd318.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.4MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ