Static task
static1
Behavioral task
behavioral1
Sample
4814afaa614d2630e9b5f8b0f4a79364.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
4814afaa614d2630e9b5f8b0f4a79364.exe
Resource
win10v2004-20231215-en
General
-
Target
4814afaa614d2630e9b5f8b0f4a79364
-
Size
192KB
-
MD5
4814afaa614d2630e9b5f8b0f4a79364
-
SHA1
44fd982d44671b28f953b1ff76f504bcac69fc23
-
SHA256
272a855aeb37b95c4890219fcf092150a1ba6dfa9219345ece10c1ec37ad3f85
-
SHA512
3690cc8e1f89a46b6d9f5b5ca00fce16600c767f2e4124b7a6ec2a79f23b5c90a948fe018e523a654c999d2f65e75f76e3b1fa9f6e017c2f411928d5bb4b8130
-
SSDEEP
3072:5x7hoPVkk9wQMOjM8GlEsJOJ2hxHMTefF6txJnE/fNlHtpFB:5x9oteQMv8WEsJVg0G8NlHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4814afaa614d2630e9b5f8b0f4a79364
Files
-
4814afaa614d2630e9b5f8b0f4a79364.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ