Static task
static1
Behavioral task
behavioral1
Sample
4c7d5caa927743803aa80604e88d0b52.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c7d5caa927743803aa80604e88d0b52.exe
Resource
win10v2004-20231215-en
General
-
Target
4c7d5caa927743803aa80604e88d0b52
-
Size
269KB
-
MD5
4c7d5caa927743803aa80604e88d0b52
-
SHA1
c91457d9a5bc2b3e462aa3a86eaaa36978628b3e
-
SHA256
9969a36432e2089747358efd737caaf5d2ed33d87577040b23e036f90ae958f8
-
SHA512
a568fd55135a215d2716597c5a075ee63ad39e4fd295c860278407a236de8e4517d2a467e8948f26a7486831a7d1b27d32fce7f0763b3da989079a1b8880ab7f
-
SSDEEP
6144:VSZa+87DJuGlxS12Ci+Q0km8dTN6R3fvCTWyDPJH:VSZJ87tuE527v6TWKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c7d5caa927743803aa80604e88d0b52
Files
-
4c7d5caa927743803aa80604e88d0b52.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE