Static task
static1
Behavioral task
behavioral1
Sample
4b7a95ab31b7609e09a89d0bf4057f7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b7a95ab31b7609e09a89d0bf4057f7d.exe
Resource
win10v2004-20231222-en
General
-
Target
4b7a95ab31b7609e09a89d0bf4057f7d
-
Size
20KB
-
MD5
4b7a95ab31b7609e09a89d0bf4057f7d
-
SHA1
5d4cc9bd7c67e33cbb87e170f9c2a0d94fb4c5a2
-
SHA256
db9de7c61222932e08293c40a432a6172b28554d570cdf82fd30fc9ab3d492c6
-
SHA512
88e4b92aedbf2ffa7515c0dd8da7aacd9ea475555ee8fd96ea0c91324e47dbc7a2d70a904c24f5173bf04e196fd94fdd059e1754b210a7fa6c15c8f5fd48d7f1
-
SSDEEP
384:K/oe8zdTyBsyqAIZhgZxtIFEXYZUEJiHlQB1mCPCp6AzW0XWkVbZb7OF:DWsyqAggZAFQY9JD1mgu6MHFIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7a95ab31b7609e09a89d0bf4057f7d
Files
-
4b7a95ab31b7609e09a89d0bf4057f7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE