Static task
static1
Behavioral task
behavioral1
Sample
4581e3602e92053f685c9c9e4feb2da1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4581e3602e92053f685c9c9e4feb2da1.exe
Resource
win10v2004-20231222-en
General
-
Target
4581e3602e92053f685c9c9e4feb2da1
-
Size
2.8MB
-
MD5
4581e3602e92053f685c9c9e4feb2da1
-
SHA1
3f02318ce3a52dcb797b4f495e81521dcc21b72c
-
SHA256
73b1b78727cb770d3b7e70a89db1b2b2939881ad88ebc672d0d81e306a05e962
-
SHA512
983eae541908a55e09749be088140640ddea3ec3c2e70c631a9c528e0813094411d7eca682e30ba0297959c8cb8b0c11e60e543762a0e0e97f19859a66972f3c
-
SSDEEP
49152:SgQX0ryUR0aXZkXaur+B/b6uEdp2sRRly39pYaC5parHAEohY3Tf76cL:SgK0sIZy+Juu6IskNCyVyY3Tfuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4581e3602e92053f685c9c9e4feb2da1
Files
-
4581e3602e92053f685c9c9e4feb2da1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 260KB - Virtual size: 260KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ