Static task
static1
Behavioral task
behavioral1
Sample
4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8.exe
Resource
win10v2004-20231020-en
General
-
Target
4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8
-
Size
3.9MB
-
MD5
f30c9afb383228326d36ece4ac0091f4
-
SHA1
525959445de113da1a187bdf6ab72ce2449f469d
-
SHA256
4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8
-
SHA512
2061c8263eff4222a576357ebb96a07c9803798867d7ba15262591989872635c904a94b072150fe01b5c117ad51fbbc4d9602d12a1699ab5e2170e054643aa57
-
SSDEEP
98304:u0ngwh1X6Rl1MmAvWUCkWhWPkueGqJudJZ6is8rVChaQfqk24:Jgwn6r1EvWUWSkuwYdJ0iNrVChaQfj/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8
Files
-
4729d9e5d0c74c167a5f3d5abc58672f97ae7b93be78bc50bdf631460f05b2f8.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 5.8MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ