Static task
static1
Behavioral task
behavioral1
Sample
004b8c9b597690e1ab8583ce80e64faf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
004b8c9b597690e1ab8583ce80e64faf.exe
Resource
win10v2004-20231222-en
General
-
Target
004b8c9b597690e1ab8583ce80e64faf
-
Size
1024KB
-
MD5
004b8c9b597690e1ab8583ce80e64faf
-
SHA1
245dd33b7610a0c509f7d56a9dd7d9b803fbf4c0
-
SHA256
025cf764de2d82719718b4e1db5634df567275eb7d83932786c482b5a902cc26
-
SHA512
8a4461ac9db0a84fc573a8ddb7f78855a84b2910dd032493293c50aa2d1edb35fac0058d1c5049e8cb8e462f35ec8e1d839e567f69b90775b18264946c12e45d
-
SSDEEP
24576:O+NB2SI1X29A1t08y8CvsFNiFpuoQKZOtnJV0wlJg7Vk1:O+1EiAy8CUPiFsoQKZOXOwll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 004b8c9b597690e1ab8583ce80e64faf
Files
-
004b8c9b597690e1ab8583ce80e64faf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 219B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE