Static task
static1
Behavioral task
behavioral1
Sample
4b4662a10001293994b1167b2fddabe5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b4662a10001293994b1167b2fddabe5.exe
Resource
win10v2004-20231215-en
General
-
Target
4b4662a10001293994b1167b2fddabe5
-
Size
1024KB
-
MD5
4b4662a10001293994b1167b2fddabe5
-
SHA1
a05f0a3f610a68fc9bbe9c166c3c23476e4ef5a3
-
SHA256
cb0553118a2ec8d9f35de6f196b53778a64dded1ec72c2999f423ada3d556719
-
SHA512
85cac32a0b263dde070d9d60a20bcf8c86b51d3f2ec2a64ccc42d28ffc6344d7f794f553a1ca2e99e41eb2f33dad88b3ed0ce3c11a26b1f8887f4964e5e8cff8
-
SSDEEP
12288:eTYDTF5aV7Kl9hAPfMjT8Pci9ZEbrp78lZPJm6jaFL4r/lf2qQaJc0eN6XVxwA97:eTYD8GhCEjyc0s+l/lf2qq2dP6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4662a10001293994b1167b2fddabe5
Files
-
4b4662a10001293994b1167b2fddabe5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE