Static task
static1
Behavioral task
behavioral1
Sample
4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b.exe
Resource
win10v2004-20231130-en
General
-
Target
4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b
-
Size
688KB
-
MD5
21a2ca225f66a6e0c61280bb5aa4e93e
-
SHA1
51530ba354cfe93f393f953049309b9eaf4244e0
-
SHA256
4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b
-
SHA512
a70f29a1dff09ca29f7f6bc2e06c2c0c82cfb78bd9fccd080cad9813cdbd5eb3051ca56b5ab80e21c9bc0a476d6173fcb12250be1d202f2b69ee1f1468670962
-
SSDEEP
12288:iCpvJYIXIb7Ta0A4ZHDWCTEY2yIotj9D49m1WYX7F+tLZurYvDWE3:RvJ1InIgHKaE7yIV9m84FSLZ8kH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b
Files
-
4b6d9c8a1dadf29aa15401c7c1a402d382bf8305ed6887f77603b2cb895fc93b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ