Static task
static1
Behavioral task
behavioral1
Sample
4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0.exe
Resource
win10v2004-20231020-en
General
-
Target
4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0
-
Size
4.2MB
-
MD5
5639539685b98886ba9bf4a6d0034f48
-
SHA1
842e0b8203cf1aa00f0b72e820c7e1f26a558483
-
SHA256
4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0
-
SHA512
528053b07f795453f19e950f527b8b51b0e384c9ee2db864cef94b6aef8723e77f23ddbb93ef6809b09ce7612c82aff58a925b2e4f1e72b7ef233543e1f0ed54
-
SSDEEP
98304:5RWaKd7E35+wRPzSpARsC1gTcUGsgztvgLoiJVhylpYms7:yaKaqSr1essgzOVJvIix7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0
Files
-
4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.7MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ