Static task
static1
Behavioral task
behavioral1
Sample
4964e08b8603513942e9fb0e7f9d385a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4964e08b8603513942e9fb0e7f9d385a.exe
Resource
win10v2004-20231215-en
General
-
Target
4964e08b8603513942e9fb0e7f9d385a
-
Size
394KB
-
MD5
4964e08b8603513942e9fb0e7f9d385a
-
SHA1
20fcf439a0fb1611ab2e2a7545fd5db4f947396d
-
SHA256
2cd6c77fd489d6fd020c20179ba695dbc815bdaebbbfd0e9ab604166aa8b7b99
-
SHA512
f9c42df7b5ba9fc52f4776a1a41455926c653e781805b401544624435b3ae453fb874433c35b48f245ff57eb2cd6ff40eb0a6cee7f83d12cca8da7d78eaf37cf
-
SSDEEP
6144:lYy6ZBkO1Xf6KDZNzQbYVjv0niwA7mvf6ifb:lYpRXf6K9N2sv65Axifb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4964e08b8603513942e9fb0e7f9d385a
Files
-
4964e08b8603513942e9fb0e7f9d385a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32.7MB - Virtual size: 32.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ