Static task
static1
Behavioral task
behavioral1
Sample
4d6049da0df6491c97b0ae5f31a2f8e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d6049da0df6491c97b0ae5f31a2f8e4.exe
Resource
win10v2004-20231222-en
General
-
Target
4d6049da0df6491c97b0ae5f31a2f8e4
-
Size
187KB
-
MD5
4d6049da0df6491c97b0ae5f31a2f8e4
-
SHA1
e0d0c2354850cdddd65b010db00ba27c81c29511
-
SHA256
f581d4081fa255f886cb7fff080def5b5347d56ad6fa7789a4e9b02055e0a897
-
SHA512
53651e0bcd85aaf567486bf674b9dd792db79e56f7d6ee8495663a7462c4ffe9f06fb584735bbf5e41d91540da38d30d49dc3c517fedce08e147027a43095883
-
SSDEEP
3072:q3iw3+iAyjNdswNhwbSv8mADcTjgy9q8kmVBtolkrn8os:hGocPsuVv8Jwt9q8kmtN8os
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d6049da0df6491c97b0ae5f31a2f8e4
Files
-
4d6049da0df6491c97b0ae5f31a2f8e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 745.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 184KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE