Static task
static1
Behavioral task
behavioral1
Sample
4bcef96f821482bf81c0277f3d18ea69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bcef96f821482bf81c0277f3d18ea69.exe
Resource
win10v2004-20231215-en
General
-
Target
4bcef96f821482bf81c0277f3d18ea69
-
Size
451KB
-
MD5
4bcef96f821482bf81c0277f3d18ea69
-
SHA1
013749271abdba3b82267d112fd60abda1620fc7
-
SHA256
a72f95b4f52fe1ac1a124f226aed17ce5951d2ce98d77a005ab92d5d2b167bbb
-
SHA512
1643d8121ec014ddfe31b00dc6da7dabaf9fde266c8a71682de5d14368d4c808cec924851e1b51fa6baef25b0480dc694190865c62ee950e6af8dcd9289f6492
-
SSDEEP
6144:IdWZmJwWFQZytM9Mxem0lDjdg10Eqyw1Eo4QuGWrb7:IVx/LsEkuGWT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bcef96f821482bf81c0277f3d18ea69
Files
-
4bcef96f821482bf81c0277f3d18ea69.exe windows:4 windows
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 427KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ