Static task
static1
Behavioral task
behavioral1
Sample
4c59d9d3222cebc7afff030953678659.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c59d9d3222cebc7afff030953678659.exe
Resource
win10v2004-20231215-en
General
-
Target
4c59d9d3222cebc7afff030953678659
-
Size
783KB
-
MD5
4c59d9d3222cebc7afff030953678659
-
SHA1
ad660d15b993bf526da9e4fc2518d6c2fc3c6de2
-
SHA256
a0bc9e37ac94d935a01885da84b5f3f52e8078a9bb1332593e9ad123e92aada8
-
SHA512
31c877074ece0cb02149479aca35a94f23e7c015f71f3aa5ec3a436ad2993cec576fb1cd8b0f81b0198634ccd7cedab339f15f82fa8df2e46dd5b798cddd84a7
-
SSDEEP
12288:nJa80J7fckINtt7g8B5tiffkGVGsMxqV4D0:JyIkIN9BrekVP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c59d9d3222cebc7afff030953678659
Files
-
4c59d9d3222cebc7afff030953678659.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Obsidium Size: 512B - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Obsidium Size: 293KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE