Static task
static1
Behavioral task
behavioral1
Sample
4489ff77b54a2ad7d95d0c5a792ed795.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4489ff77b54a2ad7d95d0c5a792ed795.exe
Resource
win10v2004-20231215-en
General
-
Target
4489ff77b54a2ad7d95d0c5a792ed795
-
Size
37KB
-
MD5
4489ff77b54a2ad7d95d0c5a792ed795
-
SHA1
d615c18b55375bb7a96cc113887bdcf515116b4e
-
SHA256
87a853fb377df0b69c990f957e2bf33711f8022b9a1ad58d18048d4b50d1933c
-
SHA512
ce05e4fc2264eb7b02239885e60c50100845182111accb0de256be93eca3fac02e2b24199e5078cb4ba11da99904a221ccce45d485e4c46f5613c75078f41a6d
-
SSDEEP
384:HTtPczozKaiSq1WP4geOEDXpIs8wCWnTCRWZZIU3xAOvr1phvk090TnO5Hk3OU:HT+zozKaiSMWPwp98eHn3xRv9F5UOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4489ff77b54a2ad7d95d0c5a792ed795
Files
-
4489ff77b54a2ad7d95d0c5a792ed795.exe windows:4 windows x86 arch:x86
51c4e98e76bd946f81a1a9c26b55ce8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord1
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE