Static task
static1
Behavioral task
behavioral1
Sample
4d1e37e023abe8a100358fcc2650c443.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d1e37e023abe8a100358fcc2650c443.exe
Resource
win10v2004-20231215-en
General
-
Target
4d1e37e023abe8a100358fcc2650c443
-
Size
57KB
-
MD5
4d1e37e023abe8a100358fcc2650c443
-
SHA1
4ac0dd87ba1d32aef3d93e76773e734281c8e715
-
SHA256
c0889c5bdc1f05c26bd57998768b2fccf7acce0d9ded9ca7dc11f36bddac1864
-
SHA512
a451d803681529ffe2f677a8e917dea3c2059b37ea58d284603defc51e048bc1993aa43c25ff9d1b6f04ef29d8fd57e1a3f9f8202c25050d2433a60411e5dec1
-
SSDEEP
768:eA5HdAQiibIek6LzKAjLpsO3DfekLn0g5rWxsEkSsyS0OZ:eAXAjiBk6LzKAuiL55w9SJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d1e37e023abe8a100358fcc2650c443
Files
-
4d1e37e023abe8a100358fcc2650c443.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ