Static task
static1
Behavioral task
behavioral1
Sample
4d42e0d3f81d28d04f69a9cfcf91b8426e460a3bbf31c8b51b8e02f750d23c59.exe
Resource
win10v2004-20231130-en
General
-
Target
4d42e0d3f81d28d04f69a9cfcf91b8426e460a3bbf31c8b51b8e02f750d23c59
-
Size
7.5MB
-
MD5
c72cc64cea266577faf259e582549e13
-
SHA1
70b2d7d11764890dfcc55f84523c63e867b34323
-
SHA256
4d42e0d3f81d28d04f69a9cfcf91b8426e460a3bbf31c8b51b8e02f750d23c59
-
SHA512
596a7a2afcf65cd43629a50e3233016bde226dfeef6a5103866ee18b9676cc6104f409f84ec0ac4794e2d09d0149f054277a715c168519382b0fc6d0ba249fdf
-
SSDEEP
196608:IWc5A2XV/1qTZGgnkphp0rAwZYGespRHDfY5cdV4qCzj:0DFyOTpBsLp1c5SV4qCzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d42e0d3f81d28d04f69a9cfcf91b8426e460a3bbf31c8b51b8e02f750d23c59
Files
-
4d42e0d3f81d28d04f69a9cfcf91b8426e460a3bbf31c8b51b8e02f750d23c59.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ