Static task
static1
Behavioral task
behavioral1
Sample
4b8382d7f71f0b3ec1a98fe308d3c8b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b8382d7f71f0b3ec1a98fe308d3c8b5.exe
Resource
win10v2004-20231215-en
General
-
Target
4b8382d7f71f0b3ec1a98fe308d3c8b5
-
Size
94KB
-
MD5
4b8382d7f71f0b3ec1a98fe308d3c8b5
-
SHA1
29a92c284011733aa57e3399aea9adb83c1795db
-
SHA256
d1bf1a42028044efb4c9d8b554d0aee86c0e3d379199421cb833ddea9fc7a012
-
SHA512
e2acfeda5a6725cad1e20523a4582e6190aaf204bdf91ec7a7e87b0e54e1f2cbb71fe6a9368907bda57cf1f8d069555267e260e22cfb26cc93f9ae8ec4871758
-
SSDEEP
1536:h9gpwz2PMIUI2ChMZgIYXjGqNCHjsFyBoQVCI7PzMCnVGhAwiNMdfHv4ylCSR4rD:h9gpwz2PqI2VKbXzNE62oSDzb+iyP4k6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b8382d7f71f0b3ec1a98fe308d3c8b5
Files
-
4b8382d7f71f0b3ec1a98fe308d3c8b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE