Static task
static1
Behavioral task
behavioral1
Sample
4c780ccdf5b3622e7ff4411b0e307458.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c780ccdf5b3622e7ff4411b0e307458.exe
Resource
win10v2004-20231222-en
General
-
Target
4c780ccdf5b3622e7ff4411b0e307458
-
Size
285KB
-
MD5
4c780ccdf5b3622e7ff4411b0e307458
-
SHA1
61c3b85dcf2dc00f7cad26b76b642b7f72832aba
-
SHA256
245edd3417cc7877cdf7a34d837aae3b7a9901c97a601d326f1f19966fa636f1
-
SHA512
4d6242838043a14bab7c0caeb960e3e2b836ce2ffd005dbf26d5458ab4c585eb4d1222e166d4278a5e753717ac4a780a209b69068051cbe82b6e9d5f88841ab5
-
SSDEEP
6144:YjUlk+A23Mlx22PNg+mTA9hj439SLxPAcC7QK/rW30sB+CHx3QFCAwHpias:YjURclmk9hjIOxPLak0sB+CHxA8AwwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c780ccdf5b3622e7ff4411b0e307458
Files
-
4c780ccdf5b3622e7ff4411b0e307458.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rol Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE