Static task
static1
Behavioral task
behavioral1
Sample
4efbe5030e87271ab3792b8ed3057e3e.exe
Resource
win7-20231215-en
General
-
Target
4efbe5030e87271ab3792b8ed3057e3e
-
Size
2.8MB
-
MD5
4efbe5030e87271ab3792b8ed3057e3e
-
SHA1
a542ca17f8ea534e3626323419a0bbf437f3bc08
-
SHA256
5fd348bad8b8ac5319f952316538cd24f875859df8088564ebecc6b5cb67eba9
-
SHA512
dca6a6128c4719870d06b5693fdf833e6c57214e39c5885cf3955923c18862b199564de2ca7dadfed5fba3b803c4680babbccbd03ed743e84edf93f282bb1662
-
SSDEEP
24576:h/NtoXmRqmROAOr74T79MQGKiWnAa6H23NkbN/XeCYiLhFqarHu3LL2Eaz9XQSOD:hlz3ROasIWfXHpGy1BXoBvje6nblmlu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4efbe5030e87271ab3792b8ed3057e3e
Files
-
4efbe5030e87271ab3792b8ed3057e3e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE