Static task
static1
Behavioral task
behavioral1
Sample
4d003e131d89b239464f818516c9bee8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d003e131d89b239464f818516c9bee8.exe
Resource
win10v2004-20231222-en
General
-
Target
4d003e131d89b239464f818516c9bee8
-
Size
100KB
-
MD5
4d003e131d89b239464f818516c9bee8
-
SHA1
bcd3868450eddf9181567c226019f70f49456449
-
SHA256
274b2cdc539b321e7c9c313bd2a178f43d431261fe075aba8d92e918d00c1104
-
SHA512
c25d303e0d5b978e0f44620822c1dfd1e4dca1fe76dad4409264be669a4baae76584f912b52dbfd17988f59d941b3d9926661398f429fe32f8b09d8ad8b943f6
-
SSDEEP
3072:Fgfn5oo3LJw8WBW+lUc5hTNKa8JP8kEWg:FgRJw8Wz5BFJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d003e131d89b239464f818516c9bee8
Files
-
4d003e131d89b239464f818516c9bee8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
w Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i7 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
78z89 Size: 900B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE