Static task
static1
Behavioral task
behavioral1
Sample
4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee.exe
Resource
win10v2004-20231020-en
General
-
Target
4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee
-
Size
2.8MB
-
MD5
0354326360bb8f23c57e1e5b4e0549a6
-
SHA1
88e99b54bcb6cae1c2c5eee975a6e25133464215
-
SHA256
4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee
-
SHA512
eed9de178476dbbc111f6dbd9044d76a4842c122437efb6a41d38d9653eeac2576f4cc159cea143a6763e60ee066cf57dd2757e66bffc937fcb0befbe10d61eb
-
SSDEEP
49152:FVGnTCLS+t7D/kRpYxFOR4m8ZzYz20KfX:FfRkRZ4TZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee
Files
-
4490ccf16fa3b22fe1447b20fc46a89edcf20988e6940a8a963af4ab91b16bee.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE