Static task
static1
Behavioral task
behavioral1
Sample
4b6ee0d7721bd0a483a9be58bcca2762.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b6ee0d7721bd0a483a9be58bcca2762.exe
Resource
win10v2004-20231215-en
General
-
Target
4b6ee0d7721bd0a483a9be58bcca2762
-
Size
268KB
-
MD5
4b6ee0d7721bd0a483a9be58bcca2762
-
SHA1
f2a2600cb85b89e497bdede8b5c9a5fa06167802
-
SHA256
cb36a73431e4cb8ae4c33c412a213821af818938c744c740eb08b033a788f891
-
SHA512
700d86705fbc752cc4916bdd1a4b6317543654dc19ae31d17b239dac9875f6603c379b41d7e1f94ac1c8f5b35ace030dc5e06203ff67f37cb3e86752b74d178f
-
SSDEEP
3072:yH5/LB4nYY4+izBsqZYba30VqKn5D1EZS7jYIB:8jB4nuDzBsqZWjV1D1EIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b6ee0d7721bd0a483a9be58bcca2762
Files
-
4b6ee0d7721bd0a483a9be58bcca2762.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ