Static task
static1
Behavioral task
behavioral1
Sample
4d49ddb1cfe00cad8a2f12c65ce157c0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d49ddb1cfe00cad8a2f12c65ce157c0.exe
Resource
win10v2004-20231215-en
General
-
Target
4d49ddb1cfe00cad8a2f12c65ce157c0
-
Size
108KB
-
MD5
4d49ddb1cfe00cad8a2f12c65ce157c0
-
SHA1
8e69b02c4e44ca7088180d4dadf84cf684faabbb
-
SHA256
d2159d8b0b78908632fd40c7ee7f3d4112a9ad4d8d9a16146767e02664b2fc02
-
SHA512
d4c8b1ebf014d5970573073a3fb1dd916aa72675df5cf4350ac8186abb9db2a334d4881d32d585d4fa52377591a5ef2a2150be5bc911ac7bbab485faebf47874
-
SSDEEP
3072:clqrQTD2Iv508NlnGyOtaIwhPZ9fadawG:clqr8qIva8TbOtFwhPZsPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d49ddb1cfe00cad8a2f12c65ce157c0
Files
-
4d49ddb1cfe00cad8a2f12c65ce157c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE