Static task
static1
Behavioral task
behavioral1
Sample
4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4.exe
Resource
win10v2004-20230915-en
General
-
Target
4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4
-
Size
2.8MB
-
MD5
3751a9d426df050d0b3693fe671712ce
-
SHA1
8791be8332a2b0eed577ea4bb15f5b9de4dc75d2
-
SHA256
4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4
-
SHA512
3a393d78757a14470beb6a88ff8670b5fb1a8a27018cc9d0b7cc16476425e4d96e9e192f847ad4b6409cdec5f02ba4fb8962f88a24c2dc45b34fda575f703f49
-
SSDEEP
49152:noL0MS3oudYLrTpGGSeFkfnHX8VOuwdkLfO4CHp6Owkil9nVvETZQBxRWCJg:n73pdYLHpGpeKfnHesdyfO4CHY9nKTZv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4
Files
-
4c65d1c6c6381f767a0d6eb115dc61d5f5c823a219949b7dada252174cad87e4.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ