Static task
static1
Behavioral task
behavioral1
Sample
4e3485c18c21a0dc305bd24dcdb43d53.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e3485c18c21a0dc305bd24dcdb43d53.exe
Resource
win10v2004-20231215-en
General
-
Target
4e3485c18c21a0dc305bd24dcdb43d53
-
Size
1024KB
-
MD5
4e3485c18c21a0dc305bd24dcdb43d53
-
SHA1
91cf6322c19e7c3b95a224a2e6c16e59ecfcf360
-
SHA256
34ad15d9a28288238330011376ccd27e1c8754a565c99750e02f857671d4ab32
-
SHA512
f9818664f8cf35764ac8c602b2ef42a9181619765fe5360925fd492abf6f11f0673adc95b99861767dea38d67d9043e0d9d9dd757204e308bc624d8c73c9dc82
-
SSDEEP
24576:vxTW7h++pTECocorpd6toqsOyGxWBuSvFcaa6UMg:ZohfWcwdVqEDL3aL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e3485c18c21a0dc305bd24dcdb43d53
Files
-
4e3485c18c21a0dc305bd24dcdb43d53.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE