Static task
static1
Behavioral task
behavioral1
Sample
4c80eeb3bce83eba4c9cdd518e43daf7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4c80eeb3bce83eba4c9cdd518e43daf7.exe
Resource
win10v2004-20231215-en
General
-
Target
4c80eeb3bce83eba4c9cdd518e43daf7
-
Size
28KB
-
MD5
4c80eeb3bce83eba4c9cdd518e43daf7
-
SHA1
fc04e2445c874724a962f90e35cbe2a1c91f4137
-
SHA256
b75671415b77230b1e11bb2ff9d22bdcf27d4d0d0471f460808b15550b567943
-
SHA512
a2849f2ecd48475bcd094ce2c190065660485b5f6202077420beec83369f89dc9c860063cf72963b924a42288817e0037392cda97081769991e042d209be69b5
-
SSDEEP
96:KQ4RycCd9VV5B9B9TRUV073sT/d1oMeO/9W6IARnP9tFHNcnApFX:K7Q/VV5B9TTBy/dyMeOFzlP5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c80eeb3bce83eba4c9cdd518e43daf7
Files
-
4c80eeb3bce83eba4c9cdd518e43daf7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.XComp0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XComp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE