Static task
static1
Behavioral task
behavioral1
Sample
4adabacc6bf40958b67967c7af0e3491.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4adabacc6bf40958b67967c7af0e3491.exe
Resource
win10v2004-20231222-en
General
-
Target
4adabacc6bf40958b67967c7af0e3491
-
Size
1.3MB
-
MD5
4adabacc6bf40958b67967c7af0e3491
-
SHA1
fdb028636189ebd1e9ec417ac5754315c9fa6ffa
-
SHA256
71fac48be0926d676ccfcf438976511f1a2d202a5e75056c3dd17d2bd5223ccb
-
SHA512
d4047d4d17afb6cb3b947891e24d8683521d72a13d312b7f98643c412eff83dce50d3b74bfd82332690d604496ec4d9de6b11efbfd8a44db5d24bf59d5f1a149
-
SSDEEP
24576:fRGWIfrar08NkPQ7+Z0OzllpM/jWEi9DpIH9f9IyiABWV/Nm/y12NhmR:fzITaLNkPQ7i0LqEi9WlIybyYe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4adabacc6bf40958b67967c7af0e3491
Files
-
4adabacc6bf40958b67967c7af0e3491.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ