Static task
static1
Behavioral task
behavioral1
Sample
4234354a0ed4ba288a2a3d77a8dd17be.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4234354a0ed4ba288a2a3d77a8dd17be.exe
Resource
win10v2004-20231222-en
General
-
Target
4234354a0ed4ba288a2a3d77a8dd17be
-
Size
485KB
-
MD5
4234354a0ed4ba288a2a3d77a8dd17be
-
SHA1
39b36a63464382907f8f4f2e50b2f13e83d471e1
-
SHA256
11a0b8d7d790a91241404749b6e216d4905f834805dd0db08e70be529a3d8f18
-
SHA512
ded8defa2a27d1be34828bc228a540f1b871eddc5627aebf1f6d9a462d9bc626b881ebea1ddaa0ab4ef6bf9c75980f28e0aa5696a5ef5aacd97f88d6f20cd56a
-
SSDEEP
12288:Ed8mJpcc+LN/Dekk4UdzAyOnsOq2jK11vh0rf:RmJph+5/DdPUdzAyOsORjK115Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4234354a0ed4ba288a2a3d77a8dd17be
Files
-
4234354a0ed4ba288a2a3d77a8dd17be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gda Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE