Static task
static1
Behavioral task
behavioral1
Sample
4cfb7e864bc8cc6365e8514e94948fd6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4cfb7e864bc8cc6365e8514e94948fd6.exe
Resource
win10v2004-20231215-en
General
-
Target
4cfb7e864bc8cc6365e8514e94948fd6
-
Size
1.8MB
-
MD5
4cfb7e864bc8cc6365e8514e94948fd6
-
SHA1
31920863c93e4ab76219178ec4be111aecbdde44
-
SHA256
863bf040195a8c20d09ae8d9cede6bc897fa47bedc908f37c037d3553a834762
-
SHA512
86fea1bf1f403fc879270cb898f552f771ceb38d3dade2a9dddd788f16e1284ba0f998f97c150da015a6d1346f97637bcc8a6e8287297af75c7bfdd25c0bc590
-
SSDEEP
49152:3BsG7Q+wFw50jWk5pjxywqrtwt9LXaAlhoZRx:3BsG7AFewv+Vr4auhoZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cfb7e864bc8cc6365e8514e94948fd6
Files
-
4cfb7e864bc8cc6365e8514e94948fd6.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 40KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdxtjxln Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrmrfqxj Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE