Static task
static1
Behavioral task
behavioral1
Sample
4dc16050ef2fd7d0094b731ccfde98f3.exe
Resource
win7-20231215-en
General
-
Target
4dc16050ef2fd7d0094b731ccfde98f3
-
Size
3.5MB
-
MD5
4dc16050ef2fd7d0094b731ccfde98f3
-
SHA1
f89a411c5b28f2054d19000fe66f4cad91acbb39
-
SHA256
4cb2bac92f34942059f0a49b01e9192f178ca555feca81299c5b78c5fd2c6583
-
SHA512
45eb9318f4b54610721d90f8570ab48221b1fdf3021eb807661b75d07f1f00a15e165389e8b3dcd3d5652973980044bf00a84e77c00259f888c01bb164d7c782
-
SSDEEP
98304:9sI1BVldvHs61AWYOw++APqCNTcq1nkU0EQ/L:pDV/71AWYQUQnxaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dc16050ef2fd7d0094b731ccfde98f3
Files
-
4dc16050ef2fd7d0094b731ccfde98f3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 76KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rxupfqik Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lsbaovik Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE