Static task
static1
Behavioral task
behavioral1
Sample
4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4.exe
Resource
win10v2004-20230915-en
General
-
Target
4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4
-
Size
899KB
-
MD5
dcd553fee99e3f5c755584d2dd40fcaa
-
SHA1
822b564c2de6c21880d67d0edc7a73def272b750
-
SHA256
4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4
-
SHA512
2f9a2fea8f681734c8dc9de13252ecccb3dfeb19da1be1357b42fde80f6474a91b7a8d6912e4966eca90f5ffd4ec1072f7dfa9455bc6018495cce63570ab557d
-
SSDEEP
24576:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErgpGvrY3tcr1R2ydMQUMbeeE7xoW:jLN+GEspLM+GE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4
Files
-
4797e9d592d28ce2c3e48fa9bb5edbca5213dfea1ba004f30afb0122fb28cbc4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE