Static task
static1
Behavioral task
behavioral1
Sample
4a238eb858d7a1b3e253bda1430d0164.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a238eb858d7a1b3e253bda1430d0164.exe
Resource
win10v2004-20231215-en
General
-
Target
4a238eb858d7a1b3e253bda1430d0164
-
Size
748KB
-
MD5
4a238eb858d7a1b3e253bda1430d0164
-
SHA1
a1d254fc54745b0312cfb7caf307114c1b668ad4
-
SHA256
86418260b24beb242576fccf08202b2d4c5a99ed1bb938d3501ef9c617222da4
-
SHA512
6c55763c57e6fdf3facf66d75ce404350f9add51be43c5df847b03199a0e783b2984576a804b749d33d1a463bceb1c88dd2d399bb68dd36c4695b24ebd7453be
-
SSDEEP
12288:0tgAvpoRpyaH8PuTjvLqS2TSQdGg6RLgJFpGh28LnfR5sckhk6+O15ehvxNytXOM:EgAvpoRIVsP0SQN6Rk2TfRyckJ+G5eDO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a238eb858d7a1b3e253bda1430d0164
Files
-
4a238eb858d7a1b3e253bda1430d0164.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 228KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ujslngrf Size: 504KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE