Static task
static1
Behavioral task
behavioral1
Sample
4d0fc74688416dfe68363c59cf4f2f3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d0fc74688416dfe68363c59cf4f2f3e.exe
Resource
win10v2004-20231215-en
General
-
Target
4d0fc74688416dfe68363c59cf4f2f3e
-
Size
687KB
-
MD5
4d0fc74688416dfe68363c59cf4f2f3e
-
SHA1
3dbf654283e11e5e7c733a8b0c9d3667d269d4c2
-
SHA256
49c9f9c031107ad1eaf3e42988dc5e437a29794a046dfabd5e20cdb1d268a910
-
SHA512
8a77b05a7abe17ed9a9c6906d29f04d5861dff163b8d6bfd49b4db5c3a7ab16f3452a9a343de599f01111f6a490643f93477bf83106abd7af3dc92450b1f346c
-
SSDEEP
12288:tLn0kOAzLcN6478mm4Xw9Y5QwGF3Z4mxxDDqVTVOCJ:5xE75mHW5QxQmXqVTzJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d0fc74688416dfe68363c59cf4f2f3e
Files
-
4d0fc74688416dfe68363c59cf4f2f3e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE