Static task
static1
Behavioral task
behavioral1
Sample
4121188bb9861e33f75878681679c141.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4121188bb9861e33f75878681679c141.exe
Resource
win10v2004-20231215-en
General
-
Target
4121188bb9861e33f75878681679c141
-
Size
3.0MB
-
MD5
4121188bb9861e33f75878681679c141
-
SHA1
5e3dec808161dc4d80dd2eb742effa51259d8ffb
-
SHA256
fbe65ea4a59282962419789db9c6dafd87b694afd3517d11bc4e902a9bf08901
-
SHA512
560a5ad666d12e34b8cb620d2785850d87752a975d2ee906ad1d51e3e1a0b7a574563dc58d24c7c47917fb17f7a3c65cf175d123ea0718b4958587dd9c7b44d7
-
SSDEEP
49152:vqfrwnqjLZ5REqQum3nCqAQ/vEEvLD9uzo16rqfbeWetYfen14FC+4AMbogmnT1b:vqfr8qjV5REqFsCwv6mfin14F4AMbog8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4121188bb9861e33f75878681679c141
Files
-
4121188bb9861e33f75878681679c141.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ