Static task
static1
Behavioral task
behavioral1
Sample
4651a71a696a97c5c0780e68c54053a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4651a71a696a97c5c0780e68c54053a4.exe
Resource
win10v2004-20231222-en
General
-
Target
4651a71a696a97c5c0780e68c54053a4
-
Size
2.5MB
-
MD5
4651a71a696a97c5c0780e68c54053a4
-
SHA1
160a058e0b53da8739ef25bb760850c150df571c
-
SHA256
8a39213cf54bbace5e3cd005ecf2cc3347724245911a46e4739d1fcedefd4012
-
SHA512
f02ed2a85043c2f0bd64beeac55775be50c4296b7b515fd5a3a1f6a1db8a6322ef01b7b407db46100a0831f59dcbf3173ed0aba18b93de9d44708df1e8883121
-
SSDEEP
12288:UZWtI6RkzUOB0vOB0Ju9OZUOB0vOB0Ju9OZUOB0vOB0Ju9OZUOB0vOB0Ju9OZUOb:UuhaAOWO/OWO/OWO/OWO/OWO/OWODOb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4651a71a696a97c5c0780e68c54053a4
Files
-
4651a71a696a97c5c0780e68c54053a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ