Static task
static1
Behavioral task
behavioral1
Sample
4d87d956d8d2ce546c9ff34d3fa7700a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d87d956d8d2ce546c9ff34d3fa7700a.exe
Resource
win10v2004-20231222-en
General
-
Target
4d87d956d8d2ce546c9ff34d3fa7700a
-
Size
48KB
-
MD5
4d87d956d8d2ce546c9ff34d3fa7700a
-
SHA1
14288804119a2ff83d370bb40b3c5e01756d866d
-
SHA256
e03ae7e9042298a2f790c9cb9286695e3542b6ee74667f56506c6c574b75764a
-
SHA512
e5ab2937e325ff22195512505fea222df6a56bc08d1f064ef37cd31412defdde1765487d54b220e67214c85de839a951d284b769ed47fe55ba5750e4858d7c9e
-
SSDEEP
1536:SbnNGgh5jpMO/4E/2fvOVRyrk0XQHMsF9:Sbn5bH/2fvwMXQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d87d956d8d2ce546c9ff34d3fa7700a
Files
-
4d87d956d8d2ce546c9ff34d3fa7700a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 755KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ