Static task
static1
Behavioral task
behavioral1
Sample
4a0906b4ac01cd28c4c1f84dac9fde1e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a0906b4ac01cd28c4c1f84dac9fde1e.exe
Resource
win10v2004-20231215-en
General
-
Target
4a0906b4ac01cd28c4c1f84dac9fde1e
-
Size
56KB
-
MD5
4a0906b4ac01cd28c4c1f84dac9fde1e
-
SHA1
864e2a45f809ade7d092c8edab406504c503b9e2
-
SHA256
44a5876716237dc5b884627c86cfb5b0a5feac1b173a3c0b5ba408791095a7e2
-
SHA512
7601c72a4e27aca4aaef3eed10f4ffcf8969ff2c74c43b39d2d97ebb770224de464150e34d2537adb57a68f1e4075b4f5db1af6141732c0e1deda6c3b28c5fbe
-
SSDEEP
1536:hf6z2pLIF8gFyXqEyfES4A+ZBjumaeDO1bWKoa:hDcFxyXqEdHPT6mawOpt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a0906b4ac01cd28c4c1f84dac9fde1e
Files
-
4a0906b4ac01cd28c4c1f84dac9fde1e.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 46KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE