Static task
static1
Behavioral task
behavioral1
Sample
4635e3cf9da4ffc18da77fe4a938951f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4635e3cf9da4ffc18da77fe4a938951f.exe
Resource
win10v2004-20231222-en
General
-
Target
4635e3cf9da4ffc18da77fe4a938951f
-
Size
693KB
-
MD5
4635e3cf9da4ffc18da77fe4a938951f
-
SHA1
794a1f4b231d3ef6f9a197f44d007c1bc44ddfd4
-
SHA256
a0ef5d51eff88c0a9995324d14c37b1a19bdff3b0ffbe3cbd69f3404232c21e5
-
SHA512
f0e794ddf9f1c37b6bd80d9ae7c535a5d6f4ef6500ce9bcac79c07b1623e7e2c7b77ec919fcea603d84b3fbc572587e869a6cb2c6e1d7e91dbd55c0894d1c744
-
SSDEEP
12288:IpOddrEOUW3KedATmxPFRVy1283F3Z4mxxko3ABt4QCdeOz:IpcrEFHedATQwkOQmXkQut4QCdea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4635e3cf9da4ffc18da77fe4a938951f
Files
-
4635e3cf9da4ffc18da77fe4a938951f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 377KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE