Static task
static1
Behavioral task
behavioral1
Sample
4d8f734d0db03ef0cbbbd4b0117b1bf4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d8f734d0db03ef0cbbbd4b0117b1bf4.exe
Resource
win10v2004-20231215-en
General
-
Target
4d8f734d0db03ef0cbbbd4b0117b1bf4
-
Size
36KB
-
MD5
4d8f734d0db03ef0cbbbd4b0117b1bf4
-
SHA1
a109fb3ff0ae19e1e882ebd93e8a243f3897f77f
-
SHA256
048787f359595c09b45c301f61c5964caaf03fd5994aa9e7d34ec00f356bf558
-
SHA512
047e9b3a3fdae8957958b3ca093ba3ce606041d6ea6873783cdf843054ee3b63ab236163491749dde3e7faa1da776e29d7ef473cc2baf1e65256d0752a31017e
-
SSDEEP
768:McvmDPsohnyMkT5YJ09M2DwATAO9YkxM6G+CN2U093BZsc3l9KUHrJm:MSasohdkuJ09M2Dxk0YwsC93B5DHrJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d8f734d0db03ef0cbbbd4b0117b1bf4
Files
-
4d8f734d0db03ef0cbbbd4b0117b1bf4.exe windows:4 windows x86 arch:x86
55ca35e0628923a04ddcb4e1f1e3ddab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
ExitProcess
ConnectNamedPipe
user32
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ