Static task
static1
Behavioral task
behavioral1
Sample
4b5e4e71c49d4b0c5cd5d55e151aaaad.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b5e4e71c49d4b0c5cd5d55e151aaaad.exe
Resource
win10v2004-20231222-en
General
-
Target
4b5e4e71c49d4b0c5cd5d55e151aaaad
-
Size
9KB
-
MD5
4b5e4e71c49d4b0c5cd5d55e151aaaad
-
SHA1
c03645ae309ea6a068cd550bdb2de71f05f19b39
-
SHA256
506aa048f06733f35130a99456bdfa7917a9a8c6a5567fe351c25e774c2629d8
-
SHA512
980fa09cc26d44f5430cb03e29706cb0618d6c85a353ae4e5fe96cafcc713b6b3a24612ace56afd75947a3f570b0449a643ff7ebdef9cc739128bb16b8bca78b
-
SSDEEP
192:QBksuPrN3y+pYeMZZ3393VnjdwCzn33s:3ZnYeM5FnhwC7H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5e4e71c49d4b0c5cd5d55e151aaaad
Files
-
4b5e4e71c49d4b0c5cd5d55e151aaaad.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ