Static task
static1
Behavioral task
behavioral1
Sample
4b7cd4f4f9ff6264e2fcbb58fa2f79d0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b7cd4f4f9ff6264e2fcbb58fa2f79d0.exe
Resource
win10v2004-20231215-en
General
-
Target
4b7cd4f4f9ff6264e2fcbb58fa2f79d0
-
Size
9KB
-
MD5
4b7cd4f4f9ff6264e2fcbb58fa2f79d0
-
SHA1
2194c68986d5db09b8d74e524d59bf24af3a6aba
-
SHA256
60904d45d51c3d598f23cda0534cf716f6d8c8e7d21ba994ee63d40e2eb2a202
-
SHA512
e260ed01b2731be943574124fba683faad174a5c19c17ba630eff9bb9fc15ae37c2a4ec93e790cbd07d6bd3d9c495f9e3a111ee9d3516c6b869b8ad3c6c1c96a
-
SSDEEP
96:/tr18EKUz6ldV3NElZffPzVGxZ1ZF1jdF5sMjxGvqNvouTXZPs+Yk19A0mnCtOT:VqpUSdVdElZXZGPdFmyGyN249pqKOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7cd4f4f9ff6264e2fcbb58fa2f79d0
Files
-
4b7cd4f4f9ff6264e2fcbb58fa2f79d0.exe windows:1 windows x86 arch:x86
bf0a9a95e07598284300d2bfc97f1ef2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
IsBadCodePtr
GetCommandLineA
ExitProcess
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE