Static task
static1
Behavioral task
behavioral1
Sample
4e17117f89ea53946b48400677914c22.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e17117f89ea53946b48400677914c22.exe
Resource
win10v2004-20231215-en
General
-
Target
4e17117f89ea53946b48400677914c22
-
Size
117KB
-
MD5
4e17117f89ea53946b48400677914c22
-
SHA1
f19e5cbb20102b85681a454f4438d9ca8c639d5c
-
SHA256
d5ed5bda90768833ee997ddff2d8f222749deecf7e93f689599229257253daa0
-
SHA512
e8388c965d3e7a716f122b199aa145b6f9108073ab741ecbf337bd0c6c1b0890c7b474c8fb2aad1a4a5bd6b5f39650c301c4c710ca02229cf156f22500f846ad
-
SSDEEP
3072:ejZxg+LANfAFHKqq/f2gQsXbsXLMew30iq5f67zu1XEov:eVxg8AhKKHf2g4Aj3Vqn9Eov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e17117f89ea53946b48400677914c22
Files
-
4e17117f89ea53946b48400677914c22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4r Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jlemm5s Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
scvducf Size: 161B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE