Static task
static1
Behavioral task
behavioral1
Sample
4a1e98c59a50eb5e942f9650c9767583.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a1e98c59a50eb5e942f9650c9767583.exe
Resource
win10v2004-20231222-en
General
-
Target
4a1e98c59a50eb5e942f9650c9767583
-
Size
240KB
-
MD5
4a1e98c59a50eb5e942f9650c9767583
-
SHA1
7dde76f3589af3f819fa7277862b2b5098e16470
-
SHA256
77d0ca64b4f49b32744d0e371a00df6d5e22e4b0bc0894908bc1ac8b6695c62f
-
SHA512
ebc174f8466477ec50a3b59c73f42de651e9744571f9edbce8b83c6f5f50fbadc135764adec351396c99d2066a1850d74d3db5a9a267aeb30ccdb158abc3c50a
-
SSDEEP
6144:R8XCY9o9DZyToR+yyWaM8z2nphoUkxsoW9khA+klLtiSfI:K2NZyT7ephoNlWV3Po
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a1e98c59a50eb5e942f9650c9767583
Files
-
4a1e98c59a50eb5e942f9650c9767583.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 847.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 237KB - Virtual size: 240KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 883B - Virtual size: 883B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ