Static task
static1
Behavioral task
behavioral1
Sample
4cb652176a5e5203f546ee15803d5a4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4cb652176a5e5203f546ee15803d5a4b.exe
Resource
win10v2004-20231222-en
General
-
Target
4cb652176a5e5203f546ee15803d5a4b
-
Size
386KB
-
MD5
4cb652176a5e5203f546ee15803d5a4b
-
SHA1
11089937d900400e54bab310d2d16e2a6b7b0973
-
SHA256
9ca774b4313eaedf74f32e564863e5bf7b94180164b6ca170804b28aa79ecfe0
-
SHA512
1975dd808dda7bab49da868a12183e2fb62e098a35d87efaa24b59b36e3e4c4a8448ab3aa71e42c2f5d267663f6893321f946083a5034945b9a5844003bf7af3
-
SSDEEP
12288:wxgQmEpTeqdX+YR4xDd0ie845iXh854ouWQgnqSGoYSzHLfTN:wGXwTXdugoW84QXy54ouWQgnqSGoYSzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb652176a5e5203f546ee15803d5a4b
Files
-
4cb652176a5e5203f546ee15803d5a4b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.BSS Size: 328KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE