Static task
static1
Behavioral task
behavioral1
Sample
4d030dbd0bc0c18fd1fd150a92239cd5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d030dbd0bc0c18fd1fd150a92239cd5.exe
Resource
win10v2004-20231215-en
General
-
Target
4d030dbd0bc0c18fd1fd150a92239cd5
-
Size
3.0MB
-
MD5
4d030dbd0bc0c18fd1fd150a92239cd5
-
SHA1
f8bcf4918bfcd28175843acf8d4314a2bf451672
-
SHA256
d80d7bc8b8f3f528884af801c4acf7951857d65c7f0e950ab0f7d4ff04c7e50b
-
SHA512
d0f794c5e9bb8e37fb88eaa47c389ddf20ece591046cec381a5caf1ffe68ff7eb0c6cc34a56d26b395b2ccd16514327a91b85e3c2aa5bae0b50cbb4ecfdfccfa
-
SSDEEP
12288:5Dqo8hAMd3rlSkZzNHhbQqj9i2ZTg3iofsuWHJNorBBAyzv8N3NUiO/+6wHY3k4r:MPzd3Fk2lCiuJTZQuTsHYxy3TbD7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d030dbd0bc0c18fd1fd150a92239cd5
Files
-
4d030dbd0bc0c18fd1fd150a92239cd5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 641KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ