Static task
static1
Behavioral task
behavioral1
Sample
4af7f0dd23cf7a204a3f8c7ee258ea03.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4af7f0dd23cf7a204a3f8c7ee258ea03.exe
Resource
win10v2004-20231215-en
General
-
Target
4af7f0dd23cf7a204a3f8c7ee258ea03
-
Size
184KB
-
MD5
4af7f0dd23cf7a204a3f8c7ee258ea03
-
SHA1
2feb1fd29e9f910f3140311ea1e2ea7f6cb5f54c
-
SHA256
df7aedab7deb24a06e47cd02f84bd1f76e3594bf21671588609c4b700fdf13ac
-
SHA512
e052139deb8df170a95abeaf59caff6fc80c4a8100c49db8d42b45509273a025f587768768d1e0295b2a59785b67a13a779cbdf0447ce2df9d1b627ba673230a
-
SSDEEP
3072:xuR6oT0xcOAEAmjyMhnOc8AMUXjMTxXldk7xKDP7VylPvpFv:xu8oxDEAhMhOc8F1BlylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af7f0dd23cf7a204a3f8c7ee258ea03
Files
-
4af7f0dd23cf7a204a3f8c7ee258ea03.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ