Static task
static1
Behavioral task
behavioral1
Sample
4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0.exe
Resource
win10v2004-20230915-en
General
-
Target
4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0
-
Size
3.4MB
-
MD5
45c196be261d1e7de94e242fc5ed0cdd
-
SHA1
606d2e5cab739734814151bd56ea15578e29ea51
-
SHA256
4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0
-
SHA512
0b42746ec85b44f5d8cfc52c35604c9c52a03616e9a251da73d7cc2aa24ed9685d143abc781345c5604d94a63767a046ac160887d87fb340e2d5ce27ff4018bd
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlQa4mAxEG:c+8X9G3vP3AMWa4VEG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0
Files
-
4821a93fa179c290affcb66846e86485f7f14b50b360f8ba0c55dd7554c4e2c0.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ