Static task
static1
Behavioral task
behavioral1
Sample
004f2d38e10e26aca3314da5a34c3489.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
004f2d38e10e26aca3314da5a34c3489.exe
Resource
win10v2004-20231215-en
General
-
Target
004f2d38e10e26aca3314da5a34c3489
-
Size
18KB
-
MD5
004f2d38e10e26aca3314da5a34c3489
-
SHA1
b6925fe98bd9ce6cf9aa5126c3ca44c31602f48e
-
SHA256
a260f1bd60d9cb707bc7e81ebd78e75c485f0cebe1197f94ee487a67846b7f76
-
SHA512
80c603579bd942afc7f6f2b762b2c0a2b796baf7f940317c94d7a7ec553316f2ca8147e9abd1990317420bd08d40b4f661ec6f9d80cba3c7a26ab45d248350c4
-
SSDEEP
384:mDW/WnzZzGOudvXaaDXxrrrhXwMsGf7MPcc35cnDRCHH8IhxS:OIvXDXZ5wMsOTA5cDG/6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 004f2d38e10e26aca3314da5a34c3489
Files
-
004f2d38e10e26aca3314da5a34c3489.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
p�W0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p�W1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p�W2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OV1RIbT0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ