Static task
static1
Behavioral task
behavioral1
Sample
4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d.exe
Resource
win10v2004-20231020-en
General
-
Target
4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d
-
Size
3.0MB
-
MD5
88695328c441710cd45bf0d489cd720e
-
SHA1
e40f92594fb4440344a27183cefe28b3dc5bc11a
-
SHA256
4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d
-
SHA512
ec8dafcb083275ada88f9944590a5b3aea14b9d0a81806f3b318da73a6aacb5edeae0e527432c41a680f3f1e9479e86f4acb314fd760be6a7556a3995fc23383
-
SSDEEP
49152:F/pTS5s81GDNNyTOqI/Dim5/nbOmyBOzVPLqIs/cF3dtaSCrL:F5SG0TZaT/nbOmhzVjqI53dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d
Files
-
4d1b87d1b512bf5745085326434abd8512eb95e7206025dcfbebbcd6ed06e54d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_READ