Static task
static1
Behavioral task
behavioral1
Sample
4be7e081c8a4d9eb55dc15c2f59c13a3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4be7e081c8a4d9eb55dc15c2f59c13a3.exe
Resource
win10v2004-20231215-en
General
-
Target
4be7e081c8a4d9eb55dc15c2f59c13a3
-
Size
129KB
-
MD5
4be7e081c8a4d9eb55dc15c2f59c13a3
-
SHA1
fe29c1953a01441c411fd4b0957f6963937473c2
-
SHA256
f1ff804b7144bcc37431d458bf7f4fe3855864f69b59aa509a4ebb9ef1761219
-
SHA512
1f10648ad7c0941c42cbacfef9ed3e9e0faacd3a6d1d0067834adca2db323e772959d2741ffd4915334b8fb8d64a472cfefcc207eabf0475dde6966ee37b9c01
-
SSDEEP
3072:cyUyzAfQVNSgaDX4jHEdj2DZhoe8DgAxhd+4tS+1Rfdd2Cy/cfc:c5/Q/SL+M2DZMFxBtS+bE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4be7e081c8a4d9eb55dc15c2f59c13a3
Files
-
4be7e081c8a4d9eb55dc15c2f59c13a3.exe windows:5 windows x86 arch:x86
48ae6ba800cb3ce40d8190a438a3603f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr100
_isctype
mfc42u
ord6582
ole32
OleFlushClipboard
gdi32
ord1002
GetTextMetricsW
shlwapi
ord8
rpcrt4
TowerExplode
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE