Static task
static1
Behavioral task
behavioral1
Sample
4cb3d11d691546275bdce764979faefa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4cb3d11d691546275bdce764979faefa.exe
Resource
win10v2004-20231215-en
General
-
Target
4cb3d11d691546275bdce764979faefa
-
Size
559KB
-
MD5
4cb3d11d691546275bdce764979faefa
-
SHA1
04e3b3ea7673e20508455bd7bbbe0e7e735f21eb
-
SHA256
236b54b89c81c7f519b7afd258b12ccf34592bfbefb1971a7f0658bdb3776f8f
-
SHA512
304d421afc3930fca16312199f3ed97b2e36e0b115b3f499d66cdec3e15a2a354d29cb995df67d2cc46edff381dd10e00799013611297568d60e0f2f580e5350
-
SSDEEP
12288:s6C8U+EnUQW8h6OLbXeWm6/ImomM8yfjl7IZBug2cpxy6oo/MpYN+R89SQfYI:1C8rGhlomMDSZ8JqxUaMpY0QQI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb3d11d691546275bdce764979faefa
Files
-
4cb3d11d691546275bdce764979faefa.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mjg Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE