Static task
static1
Behavioral task
behavioral1
Sample
4dab716993655215e26d37f201025faf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4dab716993655215e26d37f201025faf.exe
Resource
win10v2004-20231222-en
General
-
Target
4dab716993655215e26d37f201025faf
-
Size
526KB
-
MD5
4dab716993655215e26d37f201025faf
-
SHA1
6ccc76921b997530776843010f5e4a30d70501f7
-
SHA256
472e6d4ea08b2274e694fd91fa84c6de5fdd7441b0be53dadcda673ce4740e45
-
SHA512
88d9ca70452ad138fb9da299374f785e0a3f729fc653982e94a217f3d4054e954423a625d2e69b9f0928f16218646e27f9ec4287a617af00c4b765d9454f289e
-
SSDEEP
6144:9+gDzv/iMmXRH6pXfSb0ceR/VFAHh1kgcs0HW1kyApHhP+gDzvxuEUS8+LsdNX1N:NMMpXKb0hNGh1kG0HWnALsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dab716993655215e26d37f201025faf
Files
-
4dab716993655215e26d37f201025faf.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ