Static task
static1
Behavioral task
behavioral1
Sample
4b860ded0f00fd11de5a66832bf7074c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b860ded0f00fd11de5a66832bf7074c.exe
Resource
win10v2004-20231215-en
General
-
Target
4b860ded0f00fd11de5a66832bf7074c
-
Size
245KB
-
MD5
4b860ded0f00fd11de5a66832bf7074c
-
SHA1
e6124656608e798e58d72d7c780f888f79dee9e6
-
SHA256
603f9ff0fd193b50dd29a9e18d62ab0af1da9ba7a61b81180721c066768c4465
-
SHA512
a2cd87f4ff18b8106138a3d36cc9618147378faf3ceb8144d83952f556df05cb2fa18ef7840fa2d3e1a8b8f7a52e410da56a8c1431c18efd7db2c0c096b4e20e
-
SSDEEP
6144:soiY799+J063JLRR4mdvzf7ngLRxVtcblO:sZYY0SJLRCmJz7ngLRxVtcblO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b860ded0f00fd11de5a66832bf7074c
Files
-
4b860ded0f00fd11de5a66832bf7074c.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Y!lR# Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ