Static task
static1
Behavioral task
behavioral1
Sample
4494b43348237630955960d607e84c09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4494b43348237630955960d607e84c09.exe
Resource
win10v2004-20231215-en
General
-
Target
4494b43348237630955960d607e84c09
-
Size
375KB
-
MD5
4494b43348237630955960d607e84c09
-
SHA1
9222d0c7c7e2451794c155cddf0019b532dfe5dc
-
SHA256
dcdcf0747ce7046b69fc36badf89738fb9c8f4380264175148f2187630c748a8
-
SHA512
91a80544c5392ac7b1b75f5d29dd7785ad3ae13850c190b5e951e4ec291b18189e2104fdb22d3eb0bbd82d724492918ebc0c2f84eb0d8c4cbffd7d62f98c1fd4
-
SSDEEP
6144:/xrEmcTGAp222waaaz8bbbF5EcccHbbbj13b1Vz8JqsPW903sINgpUgdFY:+s2bbbF5EcccHbbbZ3b1VgJqZ9xpU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4494b43348237630955960d607e84c09
Files
-
4494b43348237630955960d607e84c09.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE