Static task
static1
Behavioral task
behavioral1
Sample
4b48cc70608509335233a5c4ea4ef871.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b48cc70608509335233a5c4ea4ef871.exe
Resource
win10v2004-20231215-en
General
-
Target
4b48cc70608509335233a5c4ea4ef871
-
Size
1.3MB
-
MD5
4b48cc70608509335233a5c4ea4ef871
-
SHA1
1ac4c4439a4e7c931b18b0a8bc80aefd4b04ba14
-
SHA256
a765a7944f58653cdb99ed576a5e17ff590496ff7a5e51e3aea61d56723302bb
-
SHA512
f43a9ae1d5f3d520aa65a8e369b489098b892fe0b65ca24a1a5f826d79abca9a64dfc2216d2342e9c32b69a0012d5d237ac201f725739a61fb33f097fb898931
-
SSDEEP
24576:7xmvPWClcf4HjIjOy86kX+33OpfPFmcyou7dNnEp22222222222222222222222I:7NClcQHsj6o3+pfPFmcudNnEp222222j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b48cc70608509335233a5c4ea4ef871
Files
-
4b48cc70608509335233a5c4ea4ef871.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 657KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ