Static task
static1
Behavioral task
behavioral1
Sample
4c237737c8aa98a5a49c39f1f37bf116.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c237737c8aa98a5a49c39f1f37bf116.exe
Resource
win10v2004-20231222-en
General
-
Target
4c237737c8aa98a5a49c39f1f37bf116
-
Size
1.3MB
-
MD5
4c237737c8aa98a5a49c39f1f37bf116
-
SHA1
5f058c332703156ba1153d01ba0e412fe1bbeda2
-
SHA256
e092e0443fb2cdf59c0e2554a8d7a4db3d09a99d27a9df9241401b1c1f577eda
-
SHA512
e22a30f314e5e246773d1631d90c2b41d2cff87577c42d4b7f3964d1340a50eb50d50c6ba2481414b3f510a4cf13a19edbdd207a360840fcec0c296005e6a92a
-
SSDEEP
24576:OScsBWCBnhACj81FYO4oF3nqlkK9D9ta763:OW/6eOota23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c237737c8aa98a5a49c39f1f37bf116
Files
-
4c237737c8aa98a5a49c39f1f37bf116.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 615KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 747KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.satanas Size: 5.6MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nobis Size: 1.2MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fiducia Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE