Static task
static1
Behavioral task
behavioral1
Sample
4a149858110b16479694198671c6ac09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a149858110b16479694198671c6ac09.exe
Resource
win10v2004-20231215-en
General
-
Target
4a149858110b16479694198671c6ac09
-
Size
225KB
-
MD5
4a149858110b16479694198671c6ac09
-
SHA1
27214a78e7ca231c6b8f00cf5c7938d94bc5ed37
-
SHA256
f0017aa4c21a3ed1f9dffc925c81e986c1ad4e822f1539ac522f9e94df9d38e1
-
SHA512
6c1b7b11418646558679c9a7da731fd598a3876c167bce1164cc9714f61271d18aa3fcc7a7aaa501a1fa8c0cc9115f5796550b00e870a39cd53a668c5857693e
-
SSDEEP
6144:8xH8Br1hDPOX3hP8MCVn3v2bm++43f64tCiJeLb:6cB/2Hd8MCVf6mj4PptCf/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a149858110b16479694198671c6ac09
Files
-
4a149858110b16479694198671c6ac09.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
adsddaaa Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
sadsdasa Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsadsads Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
asdasdas Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE