Static task
static1
Behavioral task
behavioral1
Sample
4d1b5b643b9d68dc612bc1fa603cafff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d1b5b643b9d68dc612bc1fa603cafff.exe
Resource
win10v2004-20231215-en
General
-
Target
4d1b5b643b9d68dc612bc1fa603cafff
-
Size
40KB
-
MD5
4d1b5b643b9d68dc612bc1fa603cafff
-
SHA1
d0602ca123fa0932314ee20633fb91f2a1b91660
-
SHA256
87ae3351a526f383dba2f7776235fc3f4428a7439c648180e9c9a0c2c6eb01f2
-
SHA512
a2af71cd1c0c0c66d14d72a93fba9ecfce52315a8d517e6b78515a9dea9536e4954df30e7b4237f97f5fc9f68598f37367f63d953e90bc186397a84656b8fbae
-
SSDEEP
768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH2:aqk/Zdic/qjh8w19JDH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d1b5b643b9d68dc612bc1fa603cafff
Files
-
4d1b5b643b9d68dc612bc1fa603cafff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ