Static task
static1
Behavioral task
behavioral1
Sample
4b319c93e0bc7ad210a1c2af9a2c2c28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b319c93e0bc7ad210a1c2af9a2c2c28.exe
Resource
win10v2004-20231215-en
General
-
Target
4b319c93e0bc7ad210a1c2af9a2c2c28
-
Size
5KB
-
MD5
4b319c93e0bc7ad210a1c2af9a2c2c28
-
SHA1
28e42e94208289e850fbb70b492f8c19b0873ad2
-
SHA256
cff1e99a515bcaddb2923f61d6e141f0e9cf81a811ae4c7dc82520ea64054569
-
SHA512
36e3637880da0c75088066762bee303c70ae80bf1bbd5af8df067c406e09d3d8bf9cd72528def5ee417550aae6982da2aa8f64799c3ab880acd9a8109b6111c3
-
SSDEEP
48:62Q9CEFvyCgHqw3tDokTCHblEvLRjmPCPwPFJCiz6DzSVI2fFmGU:gdQh3No7blETwaItJCiz6DzSxfEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b319c93e0bc7ad210a1c2af9a2c2c28
Files
-
4b319c93e0bc7ad210a1c2af9a2c2c28.exe windows:1 windows x86 arch:x86
814e839ca772d233f17252f7908984de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetSystemTime
CopyFileA
RtlUnwind
user32
MessageBoxA
crtdll
__GetMainArgs
exit
raise
signal
strcat
strchr
system
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 616B - Virtual size: 616B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE