Static task
static1
Behavioral task
behavioral1
Sample
4bcec76feed400176c795f2179084e27.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bcec76feed400176c795f2179084e27.exe
Resource
win10v2004-20231222-en
General
-
Target
4bcec76feed400176c795f2179084e27
-
Size
385KB
-
MD5
4bcec76feed400176c795f2179084e27
-
SHA1
02fcb4bffd035bbf1f55bbdd5d6b57ee5c9d4a2b
-
SHA256
7c5e3b494c59ed7fc99862ed1d5adeed86b160b083bf23797b04259d79087998
-
SHA512
c567248ed36411f8d9cfcfc16cac2892a0613177e88a29e221e1fa86272735bb79626931dbdfd3a16c16d65f8586cc3a0264ff4292ec9d07da5cca8de1ae1153
-
SSDEEP
6144:CZWxHGYtGGGLUmfFuwIpSbu+k3fvKDEXK52oBhNydme/o1mF5p+h8wxqru8coRlJ:CY+UmdNuj3HK0KfBhiO1EYwrB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bcec76feed400176c795f2179084e27
Files
-
4bcec76feed400176c795f2179084e27.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ