Static task
static1
Behavioral task
behavioral1
Sample
4934ed60d3bf298ce237b4545fbfb1ed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4934ed60d3bf298ce237b4545fbfb1ed.exe
Resource
win10v2004-20231215-en
General
-
Target
4934ed60d3bf298ce237b4545fbfb1ed
-
Size
123KB
-
MD5
4934ed60d3bf298ce237b4545fbfb1ed
-
SHA1
396f0dffccd3d962ef9ff13c0aeff46417df5b64
-
SHA256
3ccc6a4aacecb75ef0426d4ed9a3f9a8b7d9eb114a0959df409d2cfd4ea6fd47
-
SHA512
8366d9560d6ba34ffb9922c7a9f3dd9ecafa4f07980c5132c62d52c2b1e52bc1dab7a34a17240eb84cd0cd4b725c3036e27f00c9d19c2b995469ece4441004c1
-
SSDEEP
3072:n8uC43jFJwXyTvOOEEGPyrmzpzfF//ydhrJ5aEx9l:8744i7OLjyOzfF/03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4934ed60d3bf298ce237b4545fbfb1ed
Files
-
4934ed60d3bf298ce237b4545fbfb1ed.exe windows:4 windows x86 arch:x86
5a1138d94b54c5a16e336f57dc47a7ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
GetProcAddress
LoadLibraryA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE