Static task
static1
Behavioral task
behavioral1
Sample
4b5f840d0381c90787577aec69ea7495.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b5f840d0381c90787577aec69ea7495.exe
Resource
win10v2004-20231215-en
General
-
Target
4b5f840d0381c90787577aec69ea7495
-
Size
248KB
-
MD5
4b5f840d0381c90787577aec69ea7495
-
SHA1
d4f8a9670c7b694efb9fa5162a3b3fff23accdaa
-
SHA256
b342aaf34701e2e7d38d09be6e95d6e5e71950ea1e6c88b0b4d8406f58f59d46
-
SHA512
1f213978c5124dc7c844fae6c81c5680261f53eafdecc20730e13dc61d17367f97ca6b18d77dd31c78841ecf5b75a26f3cf1106d5c64f980ab1d99df55df481d
-
SSDEEP
3072:nBLj8ixG7+Y4k3ZKE8z3/evEko/Oe7aTtXIRkLIYJxDBFya:nB3/07+Yt3ZKENvEBOe7aTt4uMYHdU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5f840d0381c90787577aec69ea7495
Files
-
4b5f840d0381c90787577aec69ea7495.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RegCrea Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.SetLogo Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.SetPath Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ