Static task
static1
Behavioral task
behavioral1
Sample
4d2ed642fcd28dfc4f05c3f02eeb22da.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d2ed642fcd28dfc4f05c3f02eeb22da.exe
Resource
win10v2004-20231215-en
General
-
Target
4d2ed642fcd28dfc4f05c3f02eeb22da
-
Size
108KB
-
MD5
4d2ed642fcd28dfc4f05c3f02eeb22da
-
SHA1
7eaf44dcb35d2087913db436db964e9bc0027fe5
-
SHA256
cb6c09adaee70557ca206d6b02011172f5d049d53933cb66fbd2a90addbd7be4
-
SHA512
14c55b7b905edbe2e788665bbbb579c374b40a2774090b0e01d8be31a23d2f4751e593e040f881ddb5845ad39b8603ea99d0d6924af0003cf4cefd5b4a95ee98
-
SSDEEP
3072:dMLsfjPIX4144xqPrrT61BIxDh6qkhrQGmBMZ85rAw:yLQrIIqrT+BIx16ltwBMe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d2ed642fcd28dfc4f05c3f02eeb22da
Files
-
4d2ed642fcd28dfc4f05c3f02eeb22da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xyuv Size: 2KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2yt Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xyl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE