Static task
static1
Behavioral task
behavioral1
Sample
4327bcf2c2e21e8173fa1caf6591eaaa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4327bcf2c2e21e8173fa1caf6591eaaa.exe
Resource
win10v2004-20231215-en
General
-
Target
4327bcf2c2e21e8173fa1caf6591eaaa
-
Size
3.7MB
-
MD5
4327bcf2c2e21e8173fa1caf6591eaaa
-
SHA1
8a6e1e5592ff5826f0a11698dbb373de47a0e975
-
SHA256
f53953f7802dba06b9b26406e9493d39e0f787554b9c50ef73e3ec1ab6ace43d
-
SHA512
c317503722602c8b7578703d157a4235d1201e69b49dc80cff29000d8cb6e4bcea43573587ca87799a1ac1f25cf94f0da66187864eb0737359372be941e9dbc2
-
SSDEEP
49152:LGQ9OFjPyVDvFgPb9YTVoK7vara6zlHxC6c61UZp8lBAu0bZ9xm0XP8vvdStQeg0:X9OpIUJYTV1LylH4cUX8cTZC0MkscSSl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4327bcf2c2e21e8173fa1caf6591eaaa
Files
-
4327bcf2c2e21e8173fa1caf6591eaaa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Service Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE