Static task
static1
Behavioral task
behavioral1
Sample
4de58cc96ecae477ce8629f37b73e45c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4de58cc96ecae477ce8629f37b73e45c.exe
Resource
win10v2004-20231222-en
General
-
Target
4de58cc96ecae477ce8629f37b73e45c
-
Size
46KB
-
MD5
4de58cc96ecae477ce8629f37b73e45c
-
SHA1
2641a7e36758afec45cb354c4a3f2ecad49f87f3
-
SHA256
9c971492f4fba95f970d20432b4f0b35bc63383ca934975d659e845af9d42886
-
SHA512
476d248b137a688452149c0348610b829a5d6784a4e6d10bbbc77c0dc35ddaecd00566134d31adc3286c4b13359941fc80cac5cf6051d60e3a5b30e75463acac
-
SSDEEP
768:6MjdDybZnmpL5xwNDROkZ276/Cx6P9EPXW/TfKzq+I7T870xolRp4h/JI:6MjlybZnSkNDxZRP9MG/TfS2T8xIRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4de58cc96ecae477ce8629f37b73e45c
Files
-
4de58cc96ecae477ce8629f37b73e45c.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE