Static task
static1
Behavioral task
behavioral1
Sample
4d69db7c5fb79005442ec10592b70dec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d69db7c5fb79005442ec10592b70dec.exe
Resource
win10v2004-20231215-en
General
-
Target
4d69db7c5fb79005442ec10592b70dec
-
Size
172KB
-
MD5
4d69db7c5fb79005442ec10592b70dec
-
SHA1
23e9222a6ba3c2c8425b98f76b9b41be611783a7
-
SHA256
5ba80494c72eaaa34fdca45cffb5d0d4042b732d1940e0ea7ccbe93aa65e7d6c
-
SHA512
c4d630789e5336e98fed7b0c005e9dd46a6611debc03be67a94b85144aca90c0b4080afd4eeb8f74a71996941ae997dc04959aa6c9f7a655c203aa5b5615608c
-
SSDEEP
3072:gQArA8C/X7D6lM55ztbIR2i4fzebAvn2U/S:AsV/X7DwzaUAv2U/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d69db7c5fb79005442ec10592b70dec
Files
-
4d69db7c5fb79005442ec10592b70dec.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ