Static task
static1
Behavioral task
behavioral1
Sample
4bf27859c61f4ba4303aefe45c0c6068.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bf27859c61f4ba4303aefe45c0c6068.exe
Resource
win10v2004-20231222-en
General
-
Target
4bf27859c61f4ba4303aefe45c0c6068
-
Size
1.1MB
-
MD5
4bf27859c61f4ba4303aefe45c0c6068
-
SHA1
4b1667966aef5dd2e1f4cad6d16cb1c0a9d3fe00
-
SHA256
9ead2351420fa04d9c146976ac4695d5280e3c5b6d5d2d3675995afff6c0708f
-
SHA512
4382799ef82a1480b9b06a5a1f2eac7e9145e62bb88e90459472658bc3bc06c524bbdd193fa7462afe77c71720f48b18d3d5c41dd462de834d05cad8086a1352
-
SSDEEP
24576:aOdh7QijYRWDXPYBkHfZRXkS8MqReB/04crPVNRn07I6Wo:aO30wZ2eB/pcrPVznl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf27859c61f4ba4303aefe45c0c6068
Files
-
4bf27859c61f4ba4303aefe45c0c6068.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 788KB - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 15KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ