Static task
static1
Behavioral task
behavioral1
Sample
4ee3f8e5b25434efa393f76ac36e4e70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ee3f8e5b25434efa393f76ac36e4e70.exe
Resource
win10v2004-20231215-en
General
-
Target
4ee3f8e5b25434efa393f76ac36e4e70
-
Size
1024KB
-
MD5
4ee3f8e5b25434efa393f76ac36e4e70
-
SHA1
71821a10a1f30df37740f91636823ada16dedf47
-
SHA256
8283434736c747260976338ad0d13dc2845b371b70007c46e2af648ffaa051d2
-
SHA512
60d2c10596223a330a1c310b471eb427fb9623cc167913fea424cd1c2653a4df4e642405b2d95c1cafc4859b782c5a9a1d7a213042dad314f787d0b68ac3c8ff
-
SSDEEP
12288:UunNALl8JTs+OStkJs+8TzwKU6tcN+ogoKQmn1afb/xuqxgPbCp0eG:UunNYU74JT+8ZN59KQWafT4qxgjCp0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ee3f8e5b25434efa393f76ac36e4e70
Files
-
4ee3f8e5b25434efa393f76ac36e4e70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 297B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE