Static task
static1
Behavioral task
behavioral1
Sample
4f9cced988a73931fd48ccb42050c7e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f9cced988a73931fd48ccb42050c7e7.exe
Resource
win10v2004-20231215-en
General
-
Target
4f9cced988a73931fd48ccb42050c7e7
-
Size
704KB
-
MD5
4f9cced988a73931fd48ccb42050c7e7
-
SHA1
9c40227ec20c8938213fe1b6e65ae7c78c201373
-
SHA256
6e5861addb5fd14b5a5e6d514d65357e4cf4ca108ac7e3e7240a3746b641819c
-
SHA512
9db9a3162021aedb86d5897ab65b935c920cd4a4e88983be7fc50fd615fb757a6da0cf7d936da7a1420aafa9ad70ea665d758653bc9e9e2b6cb53c662fb42f7a
-
SSDEEP
12288:l9Ot9JniEvpOoCUYO2wlv8ilSOW8RXOZoJQIcATRIk0xFJgh9up9V3ICwera4sPz:6nJ5xWUYlajSG+CaS0x/u9upb3Ze4sr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f9cced988a73931fd48ccb42050c7e7
Files
-
4f9cced988a73931fd48ccb42050c7e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ