Static task
static1
Behavioral task
behavioral1
Sample
4930c2019a53b0b39905e5043687dcfc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4930c2019a53b0b39905e5043687dcfc.exe
Resource
win10v2004-20231222-en
General
-
Target
4930c2019a53b0b39905e5043687dcfc
-
Size
1.2MB
-
MD5
4930c2019a53b0b39905e5043687dcfc
-
SHA1
9103deb246382967640ba9af86e2adc4c8203e45
-
SHA256
1d7abd76df936d95965063775c679e2041a8b16bd84508349a6018567f2f1901
-
SHA512
bba4f33ba5eb578b800f1c55e5e9ae6b2f713155ea991751c95329fad39f1e701e7d728ab000f99959d8c64b894760715c3fab86eaaacf28850a2da76bd1004d
-
SSDEEP
24576:yPggfUsiTquimmb/5QaoGNUeDWdCZsGUy8:Uggcp2Dr5FxlSdiWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4930c2019a53b0b39905e5043687dcfc
Files
-
4930c2019a53b0b39905e5043687dcfc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ