Static task
static1
Behavioral task
behavioral1
Sample
4bbd7edebf35d486a75b0b25b5492980.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bbd7edebf35d486a75b0b25b5492980.exe
Resource
win10v2004-20231222-en
General
-
Target
4bbd7edebf35d486a75b0b25b5492980
-
Size
1024KB
-
MD5
4bbd7edebf35d486a75b0b25b5492980
-
SHA1
7897da9a0f059c91ff081ebce9a9e6976c6b0914
-
SHA256
3dd5f74a429c11ca842e9138cf8a112682edc89f08cf2b4d5ba8c6a71c5e23bf
-
SHA512
05c8421f31da2c3e8395c5492f7faa1bf20aeeb84d37efb5161b9f408a4ec8d3e46d206ecd54a53fc66839b66b02ac1e190f0fa5d0757518ec52f5b1a8e048c8
-
SSDEEP
24576:wAd5yqawD91vyOGWD28B+78C3Yb5dhsJERe7RUtAZGuvrLrm6P01kF:wQDvvSa2Nh3YtdFboPTLS6P01kF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bbd7edebf35d486a75b0b25b5492980
Files
-
4bbd7edebf35d486a75b0b25b5492980.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE