Static task
static1
Behavioral task
behavioral1
Sample
4bf3bc6245e85f27da66a715cba8308d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4bf3bc6245e85f27da66a715cba8308d.exe
Resource
win10v2004-20231222-en
General
-
Target
4bf3bc6245e85f27da66a715cba8308d
-
Size
385KB
-
MD5
4bf3bc6245e85f27da66a715cba8308d
-
SHA1
abf7ae4d7cd66823956c2f8d7448ee61c5b7ab7b
-
SHA256
84e398f138b0a300f43e19cd9cd35c9aff89a2dbfc74087e20d4a0610e2e5e7a
-
SHA512
dae66739784cb9ab973ff8de9e9051a2dd8a5f201d77edcbd3f1dcc17711c27dac265a06983c55893cbbbf32e8fa152e46616f8bd748a7118f5d97248c8f22c0
-
SSDEEP
12288:afUL395l/qXXCNB+npfxx48XypUL9ug1LAky63ZROB:zqnCf+nJxx48XypULN1LAky6DOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf3bc6245e85f27da66a715cba8308d
Files
-
4bf3bc6245e85f27da66a715cba8308d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ