Static task
static1
Behavioral task
behavioral1
Sample
4895c38845926cfb7f56c5454e7614e1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4895c38845926cfb7f56c5454e7614e1.exe
Resource
win10v2004-20231215-en
General
-
Target
4895c38845926cfb7f56c5454e7614e1
-
Size
260KB
-
MD5
4895c38845926cfb7f56c5454e7614e1
-
SHA1
41dbc42038cb562d2f2c0438ad8aa82cfb888d07
-
SHA256
e783961a227b1cb982ff6510d08e5c500e34c631f2a87a785085a8371173e996
-
SHA512
e5ff114b8960983f06961dd1a9db13129d08c97af0e94975f8ca1262a0b80eba76366c1ba897ac0e6852f69ab8593bc88c8de390411f1cfeeeaf7ad4b928ff7c
-
SSDEEP
3072:ePoUGYqyBytHSiUJkOOY/CQ5cZ8B3G9DEgkZFqn99rsRQ2a2iJm:r3yePxORKqy8k9D6o99rsm2iJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4895c38845926cfb7f56c5454e7614e1
Files
-
4895c38845926cfb7f56c5454e7614e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
_FLAT Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ