Static task
static1
Behavioral task
behavioral1
Sample
4a2f9c72563d80e5d6282f7819c7de0e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a2f9c72563d80e5d6282f7819c7de0e.exe
Resource
win10v2004-20231222-en
General
-
Target
4a2f9c72563d80e5d6282f7819c7de0e
-
Size
808KB
-
MD5
4a2f9c72563d80e5d6282f7819c7de0e
-
SHA1
d72b316a35b633b5aff5cc4ee6df1417fa7adc6f
-
SHA256
e995034f37066a6831463df0404121058e11d4a01e6550be4ea63f61b3939d7a
-
SHA512
2fe567061d41f8fbdb731bf9573097b10fd3adad92adae797eae3e3cea001d48eb45f653f3334b53f421ea79ef6bf60efea6b28515ed8e3572d31ed730383924
-
SSDEEP
12288:2gwcSvsEKP3esAdrmhY8kF3Z4mxxQDqVTVOCk+I82Hmlg9DoEh:2DPvsD3TAQhKQmXnVTzo82Hma9vh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a2f9c72563d80e5d6282f7819c7de0e
Files
-
4a2f9c72563d80e5d6282f7819c7de0e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 161KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE