Static task
static1
Behavioral task
behavioral1
Sample
4b0403f93aa96c2e7f0ad3bac1f477a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b0403f93aa96c2e7f0ad3bac1f477a4.exe
Resource
win10v2004-20231215-en
General
-
Target
4b0403f93aa96c2e7f0ad3bac1f477a4
-
Size
54KB
-
MD5
4b0403f93aa96c2e7f0ad3bac1f477a4
-
SHA1
17f2c70af4fd4f914daf532a9bfcf74636059861
-
SHA256
6307bb17fbfa55239e0e6a6b2885b489c154cc187a3cd3c8a3028d09efdd2ed6
-
SHA512
b1ed276078e1aab883b249987cf94e0cb6ee7c3aa58d4f0761a51da4afbb1cb0dc86a17297eabd37f0d86fc4d41566f2e408dfa9874c8a4190b12a7609a3fbee
-
SSDEEP
768:TevFIYm0on6HGavZRtQffoaFNnioeQpYGBIua/k/Uz3nvnUIh+Dt6FBAThfbAVTl:+cV6HGavqgabIuQwqfU6BFchfUWIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b0403f93aa96c2e7f0ad3bac1f477a4
Files
-
4b0403f93aa96c2e7f0ad3bac1f477a4.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ