Static task
static1
Behavioral task
behavioral1
Sample
4e033a679305a70d782b78f142d8362e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e033a679305a70d782b78f142d8362e.exe
Resource
win10v2004-20231215-en
General
-
Target
4e033a679305a70d782b78f142d8362e
-
Size
15KB
-
MD5
4e033a679305a70d782b78f142d8362e
-
SHA1
5039d163abed8bd72c78963be9e87bd00499ebd7
-
SHA256
b5b53c7954b7ad9dc589b97201608d8e244ba4dba2ec6135b93de8db24c70abd
-
SHA512
ada6561ca6c569ada56c52a3d3a57ca271aee4e0c19da00b7218383f37029e775004354e92ae4023fe117c17fa7cf94f4cbe30d54cf027ed4b11429639654e04
-
SSDEEP
384:IEnYHc7M137v9X0Vj0A1EocPK2iJ8uPA7N1o:IEYHc7A37lX0SoEoc5un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e033a679305a70d782b78f142d8362e
Files
-
4e033a679305a70d782b78f142d8362e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE