Static task
static1
Behavioral task
behavioral1
Sample
4c4811f2453730ad5e29dba624262e93.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c4811f2453730ad5e29dba624262e93.exe
Resource
win10v2004-20231222-en
General
-
Target
4c4811f2453730ad5e29dba624262e93
-
Size
3.8MB
-
MD5
4c4811f2453730ad5e29dba624262e93
-
SHA1
f88147f4f9d940aab5b4a1f559eeaf72f9504f9f
-
SHA256
731d37d1e37fa883f4dc80f275d40d56778b086f9aec6733504deaa0fea68d7f
-
SHA512
332f36a10bcc5663e07d3514069915d5c26fd9959dab1ca67870b6c9251943a2544b474b663a7184545d73fc9dc0b677f7b64a2bedffddeb35b26fb673ee20bc
-
SSDEEP
98304:hYnYMyuXczI1AV+kDrF0SazCygTDuJnbg:s/LM0ecg/eivwbg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4811f2453730ad5e29dba624262e93
Files
-
4c4811f2453730ad5e29dba624262e93.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 518KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ