Static task
static1
Behavioral task
behavioral1
Sample
4a70f4035c27cf9731bbe0b4785742da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a70f4035c27cf9731bbe0b4785742da.exe
Resource
win10v2004-20231215-en
General
-
Target
4a70f4035c27cf9731bbe0b4785742da
-
Size
14.5MB
-
MD5
4a70f4035c27cf9731bbe0b4785742da
-
SHA1
a2872e2e130d239b729e18eb7a7b4e8bbbec1c19
-
SHA256
e51b741f0a207cf0d54062452e734d1239ccddc51f3eba6e405c97c8aa570d81
-
SHA512
17022f9308460e5c8b6f10587ba6dcfc708dd5b58a059dbede384b543b1717654f01b21e427a4ae08f253295f0e2778a9fd075dcbffbd7d72361fea495fe733a
-
SSDEEP
393216:n6HJAAY2zJUiRr7v2ZjeX0wTpT7c/a0cyCeWDsRmQ1jpQ:n6uW7v2ZjeX1Nqa0cyCevQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a70f4035c27cf9731bbe0b4785742da
Files
-
4a70f4035c27cf9731bbe0b4785742da.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14.4MB - Virtual size: 14.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ