Static task
static1
Behavioral task
behavioral1
Sample
4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5.exe
Resource
win10v2004-20231020-en
General
-
Target
4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5
-
Size
2.7MB
-
MD5
6b4a5c298eaceaf0d3afac2e8ef00c08
-
SHA1
905d88bf3adfa2265f21288d75721b3d5bb5bedf
-
SHA256
4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5
-
SHA512
92b07e5d605dfcd415d500912e54dcab53e799d7e81702bbc8ea153366f49ad7d555717aa05d416a371cdea52c76d9bdf57ab94f4e84ce3406e58db4d150cf7b
-
SSDEEP
49152:pV/0sVhSw+7MmCRsQH5RH9arCa5yVUE084jJB3y07mu6D4J:pfhl+Q3uQ9arCaEdh4jJB3y+/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5
Files
-
4796f644221e7a32e6e9f498a07b87a7bc25c2ae30428853f0453a0d9e3057a5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 546KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 17KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ