Static task
static1
Behavioral task
behavioral1
Sample
4b5d1719afe1a0fafde9f704ad0e05cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b5d1719afe1a0fafde9f704ad0e05cb.exe
Resource
win10v2004-20231215-en
General
-
Target
4b5d1719afe1a0fafde9f704ad0e05cb
-
Size
448KB
-
MD5
4b5d1719afe1a0fafde9f704ad0e05cb
-
SHA1
ecc63c7388d4102b4ca251733a687cf492edda76
-
SHA256
dc2e0d489609b090ccafae12cef29d543e31e235810bc493a21aa392353a8fa3
-
SHA512
b0675cc553d26332f8781199051be6d9d2b80c0ce7f6f51de2a619369fa4f924b93e9ba421bcb5884642bc06d9877d38c560a1a8bb26e5fbbfba982b0757373a
-
SSDEEP
12288:fgnaNs2T+8I7hf3IgihOsdn7H4qQLnbvS:YaNTw7hf38NBj8Lb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5d1719afe1a0fafde9f704ad0e05cb
Files
-
4b5d1719afe1a0fafde9f704ad0e05cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ