Static task
static1
Behavioral task
behavioral1
Sample
4bab2c41b5f4142c9b40af6176a9c8f3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4bab2c41b5f4142c9b40af6176a9c8f3.exe
Resource
win10v2004-20231222-en
General
-
Target
4bab2c41b5f4142c9b40af6176a9c8f3
-
Size
907KB
-
MD5
4bab2c41b5f4142c9b40af6176a9c8f3
-
SHA1
6e644ed5eaf0d19f09450fcf5e750a353cc0cf85
-
SHA256
78fac3bfc07d1dd70fdb89c25eb9435f70ccc8bebce50842517ebe8e2e038950
-
SHA512
caad74e31a24dc5b98ff28e76c1461564654a1e73606b91810b075294e439529ef137b567dbe15096c818644c8f42e938e018277ad23d3b864ad1796112aa588
-
SSDEEP
12288:izfR0I9ckuRATg7PM8grS96qY+l7gXoXkcPbVqIqQyp1iX48+LjVDa/ZS1:+fRPCNgQhejcPbVqz0o8+Ja/ZS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bab2c41b5f4142c9b40af6176a9c8f3
Files
-
4bab2c41b5f4142c9b40af6176a9c8f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ