Static task
static1
Behavioral task
behavioral1
Sample
4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9.exe
Resource
win10v2004-20230915-en
General
-
Target
4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9
-
Size
12.8MB
-
MD5
37041f980e76576f47061b3feb827dc4
-
SHA1
4af1c252f3ef3dc785864bec06e9d35592453e9b
-
SHA256
4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9
-
SHA512
cf0c19087200b9552adfdee7e3c60392558c194d03ff5127c5f40edb0f84f9097b9bf361765fb4eaf1d6faef598e9ff6394ef7978aa71c55dcc05bbe5ac57c6b
-
SSDEEP
393216:7Hob6Ns3b+5Qbyc26GD7EuZvN+uBiowOX:7IcVOX2h3NJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9
Files
-
4df4072c364a4b7472ff0a8fcdeb56d94cc2fb866fdef29db92a83e1b8d9f1e9.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 12.4MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE