Static task
static1
Behavioral task
behavioral1
Sample
4b1b8c511158e4374a97bd44d0d3f6f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b1b8c511158e4374a97bd44d0d3f6f8.exe
Resource
win10v2004-20231215-en
General
-
Target
4b1b8c511158e4374a97bd44d0d3f6f8
-
Size
907KB
-
MD5
4b1b8c511158e4374a97bd44d0d3f6f8
-
SHA1
6ac3290c78888a61b1079f1e10da0b10c72044db
-
SHA256
f450ed229517f06469a4f9bdb19d1bbd6384def0b7688ebd7a8129da30343909
-
SHA512
68152d73d6b65e5042364d201724be472d4bbcd331dcea3c74aa7aacc1aeb7a21d05d62e5bfdb6249b9b21ddaf0236b3e86243f6609513e02f74e04012f7c55c
-
SSDEEP
12288:TZ1PuWkclAnZ/v4PkQhJN6aohpCKKOkpLSbSUy5gSbDPmQQlWhiOns9fFjVDa/Z0:TKaCluKeaSXgSv2tOs9f7a/ZS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1b8c511158e4374a97bd44d0d3f6f8
Files
-
4b1b8c511158e4374a97bd44d0d3f6f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ