Static task
static1
Behavioral task
behavioral1
Sample
4b8e485fffaa7226eee5f5a1184e8eec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b8e485fffaa7226eee5f5a1184e8eec.exe
Resource
win10v2004-20231215-en
General
-
Target
4b8e485fffaa7226eee5f5a1184e8eec
-
Size
84KB
-
MD5
4b8e485fffaa7226eee5f5a1184e8eec
-
SHA1
ebceeaf523270e08e403dccc63811458c7a47253
-
SHA256
ae480ed5f98160a40c328d67e3cdf76968ee6d06ca2c8bad2f8695778c1a8220
-
SHA512
cfd64f77d51b543ff8dace9a1f2ca111a5d2705a58e5520620235e14d7e0b7a75a37868b491473e5bb75685873e8ec8dbe6586f077e5ca52813bba955fcfe1c0
-
SSDEEP
1536:xY8XAaMMc/1hvjwnDFhg2cvBSvjgKG61HdEfcReZSIkUe5h4AF+ImvlcA96/CLjL:xbXHU/1tsFhg2Nvo61VR65Ve5H+ImdcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b8e485fffaa7226eee5f5a1184e8eec
Files
-
4b8e485fffaa7226eee5f5a1184e8eec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ