Static task
static1
Behavioral task
behavioral1
Sample
4e0e5cb273a6fb85e2d52424caec6bf8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e0e5cb273a6fb85e2d52424caec6bf8.exe
Resource
win10v2004-20231222-en
General
-
Target
4e0e5cb273a6fb85e2d52424caec6bf8
-
Size
217KB
-
MD5
4e0e5cb273a6fb85e2d52424caec6bf8
-
SHA1
0bdd9ad0f1b084208dcae6d340ab8df9da4ca18f
-
SHA256
791266b2e09f8ffce35ecd334d7237e9da77b62896bfcb7ab02751cca5e97971
-
SHA512
cd17b8f3c174999bcfc27911338f6c6491672e3df8197d65d9c41b7a18cd8fc7a8a08b0d92d18bca33cb06453ad110d3e5836e45fe0d99264c7a1f53357db6f6
-
SSDEEP
1536:gextX2ZsqGhC58gTAGWOq9UtaKi0k7LD18cW406H8282G/dxcWsLUPKS/tv2WtLY:r6GCq+ULT82G7PKuYWhCm7OxqS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0e5cb273a6fb85e2d52424caec6bf8
Files
-
4e0e5cb273a6fb85e2d52424caec6bf8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ