Static task
static1
Behavioral task
behavioral1
Sample
4bd7c8ff1359ee67e55b21616bd50aca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bd7c8ff1359ee67e55b21616bd50aca.exe
Resource
win10v2004-20231215-en
General
-
Target
4bd7c8ff1359ee67e55b21616bd50aca
-
Size
20KB
-
MD5
4bd7c8ff1359ee67e55b21616bd50aca
-
SHA1
c2debd9c7f8642c4fa2c8ff08dbeb5ae556b9347
-
SHA256
d6f5e5e9383193daca87d21df64922a9496d5e5c8c64c768a19407a52a3e9ddd
-
SHA512
3368935d3d50a6abeb7c8252a88b3e672579c8ce89f2b5ce0e574af52f260286a320bec9ecbaca038fbc443826842aa5c60a2099bc078c52645e32aeb87464b9
-
SSDEEP
384:dw2PXV/pS4I+U4WttUfqR9cU7RjCxMHMecMDN4:yg7S4IS6P7RuxMHMeLO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bd7c8ff1359ee67e55b21616bd50aca
Files
-
4bd7c8ff1359ee67e55b21616bd50aca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dynfgaj Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wkkofli Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zfovekd Size: 1KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uhkwkzu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tuhinhm Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE