Static task
static1
Behavioral task
behavioral1
Sample
4c70d3b8436979b4f3fc8e8806f41b1e.exe
Resource
win7-20231215-en
General
-
Target
4c70d3b8436979b4f3fc8e8806f41b1e
-
Size
1.4MB
-
MD5
4c70d3b8436979b4f3fc8e8806f41b1e
-
SHA1
794e498b3cd5d5e8a37b484a599c9ecab4b1cbc9
-
SHA256
e011509478b2d935e0a649b2f9dc53c36bdb693bd4629070c3c7368311baa7d5
-
SHA512
881e929dbf5c2f236395d5fb19f1ca9fc3fdd360b4407970fd3d1464d489b3708202c23c4ff7a91d817b4228745ee07bdc02f681170b24076fdfbc5f8cf3de04
-
SSDEEP
24576:kay58CgBVHRD2aLIrs8DhsPp9h9Z4BsBWwv83RE/60Mj3c/j7PVhN:B3Cal+rfheBBWwE3W60Mj3ctn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c70d3b8436979b4f3fc8e8806f41b1e
Files
-
4c70d3b8436979b4f3fc8e8806f41b1e.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pfofbqsc Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rjssghal Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE