Static task
static1
Behavioral task
behavioral1
Sample
4b1965da266bc808b2986535d38ad4c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b1965da266bc808b2986535d38ad4c4.exe
Resource
win10v2004-20231215-en
General
-
Target
4b1965da266bc808b2986535d38ad4c4
-
Size
36KB
-
MD5
4b1965da266bc808b2986535d38ad4c4
-
SHA1
6e15279bb6b91ad6ea4ecd0f48f9196cbbc75d26
-
SHA256
f1d3d22b88c36bd03d17f506ff3df6e448137d2ff8f79b5b231bcd0d15940e1c
-
SHA512
c16efa560301459216564a13c8ca1cb109f83b74a3f25de3cd3aed43854aefa6f81d5e4e8cc17306bcec3dbd09781c9756968299a757d7cdb59aaf18652115a2
-
SSDEEP
768:X+Maq3ED+nodcwSMR602cfS6NarslcQo2hc3P/VxKePDUmyr0ciSHS1a:Xzaq3gdcwf602qNarslD83VxPDUZrdik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1965da266bc808b2986535d38ad4c4
Files
-
4b1965da266bc808b2986535d38ad4c4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ