Static task
static1
Behavioral task
behavioral1
Sample
4a3a62c682a402bc35ebc07c95f62fb7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a3a62c682a402bc35ebc07c95f62fb7.exe
Resource
win10v2004-20231215-en
General
-
Target
4a3a62c682a402bc35ebc07c95f62fb7
-
Size
32KB
-
MD5
4a3a62c682a402bc35ebc07c95f62fb7
-
SHA1
028f8ccd219ed867afb153c9d26f79bbec38029b
-
SHA256
1cdd13d754893d86fda3a07c814fad2e14d32ca513e932150ba6908d017d49b7
-
SHA512
620b8f688a1dfd04e911a794738474ad045bbea15a766a7c3a45a1d33d7da1262975fd02db5da72d28a11c3b27c4fcfb16888e548f78433e48c0dbd761ba524f
-
SSDEEP
768:QIk8voGII+z+aZYI4cSN5N4TzMFvXrd4XLBKybiUYtonN2EkzjQf:5k8vohI+zRZYZcSNmzWvXBUEn/oNtkH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a3a62c682a402bc35ebc07c95f62fb7
Files
-
4a3a62c682a402bc35ebc07c95f62fb7.exe windows:4 windows x86 arch:x86
37c0608f24ea4f5b69005df26d5dd626
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
Sections
.text Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bedrock Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE