Static task
static1
Behavioral task
behavioral1
Sample
4855e4f73473622f40d05f9787d1306d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4855e4f73473622f40d05f9787d1306d.exe
Resource
win10v2004-20231215-en
General
-
Target
4855e4f73473622f40d05f9787d1306d
-
Size
4.7MB
-
MD5
4855e4f73473622f40d05f9787d1306d
-
SHA1
65554a0daaeb8047d8aac7f95198bf0c31cd6777
-
SHA256
a206134685f4d968a8a90e8548f14eacefd84f6d01d8b58e65cf8aa6923d8377
-
SHA512
43f4f4c6b2d59a7b9273ad536aac68b5322e18524eb7f090270697b5722e1c1f40e066b515a6f26e461eaa1078edfd043e5d2406d1ffe5bc4cc1f9bf7b3bcbb0
-
SSDEEP
98304:qytHBCmpIeVQZaZH5lITBNNZkt1J5aNw+wgpFnjf16VyC3PR5:Rimae5L2TBNNZkLY6gpLSXp5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4855e4f73473622f40d05f9787d1306d
Files
-
4855e4f73473622f40d05f9787d1306d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.1MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ