Static task
static1
Behavioral task
behavioral1
Sample
4fd159b9decd393672563386761a3620_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4fd159b9decd393672563386761a3620_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
4fd159b9decd393672563386761a3620_exe32.exe
-
Size
14KB
-
MD5
4fd159b9decd393672563386761a3620
-
SHA1
3552852cd000ebf49a7098e3313f30968b2c1472
-
SHA256
e06b11a43c8fc524859a8adfdde4636b47c5c7d42ed5fb0b19e5162d879eb6d7
-
SHA512
0b5b19238997171e04be4d8a8841f192ef96ea53b367e48a2e11f59dba22ceebc1fde731f815cc18e9eb746317d3da058ba2347d91d11e106f3c1440f71cc4a0
-
SSDEEP
384:gl7RNCDqC6pIRLXeIdz61hPqlHDcUb2MtzNDE045H:glVRCZRLzYhPob/JA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fd159b9decd393672563386761a3620_exe32.exe
Files
-
4fd159b9decd393672563386761a3620_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ