Static task
static1
Behavioral task
behavioral1
Sample
4c3b29bfab6b637017df27027540493e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c3b29bfab6b637017df27027540493e.exe
Resource
win10v2004-20231215-en
General
-
Target
4c3b29bfab6b637017df27027540493e
-
Size
175KB
-
MD5
4c3b29bfab6b637017df27027540493e
-
SHA1
6f90422e9a3faf8219198e96fac4e850bdda9eee
-
SHA256
ebb69e3fb4467fee83d0513fd975cea8ecca75423f8a7b49195ce434ddff5a24
-
SHA512
02d36ff86a1f261a4ec4c7b88debbde1ec9f4c05e4b212aa956030131e34a2725f94311f505b0ba7b4543ce7bc754e600d8616c32707317b297ad4afa6b42c2f
-
SSDEEP
3072:olEF8EUaVlje+QgnMCgatizMfkXlu9JuVxqOPeJVNDorIBRqC7Zjt0i8dwgS:ouF8eVV+CgadfkVzxqOQcYRqKjt0iXgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c3b29bfab6b637017df27027540493e
Files
-
4c3b29bfab6b637017df27027540493e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
aortxaw Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7zi Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xti2di4s Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE