Static task
static1
Behavioral task
behavioral1
Sample
4a548b8ce02bfad28dc195ff720cc038.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a548b8ce02bfad28dc195ff720cc038.exe
Resource
win10v2004-20231215-en
General
-
Target
4a548b8ce02bfad28dc195ff720cc038
-
Size
64KB
-
MD5
4a548b8ce02bfad28dc195ff720cc038
-
SHA1
b6cd3f81f61dd5acc45520a7221ac7d367016a88
-
SHA256
cb2ec1de1b0d4f59d7cd9d80b1eb17b0cd6b4cdf267dcf75ca5a155756b0be50
-
SHA512
579259ee11dd2339123ea5bd7d78c620d55c701e6e086775291fa65c6d5e1988f5656e05c4917bf8e33ebfa4af46bd41ab40c14eb6ea2f755979232d85f89aea
-
SSDEEP
384:fCiffixADpvSoDGOususCj0CanRcg9Mh:fgxy/D1u4CQ6gC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a548b8ce02bfad28dc195ff720cc038
Files
-
4a548b8ce02bfad28dc195ff720cc038.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE