Static task
static1
Behavioral task
behavioral1
Sample
4e3c4f9deb85ec8ee51e33a21d3c8e78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e3c4f9deb85ec8ee51e33a21d3c8e78.exe
Resource
win10v2004-20231215-en
General
-
Target
4e3c4f9deb85ec8ee51e33a21d3c8e78
-
Size
122KB
-
MD5
4e3c4f9deb85ec8ee51e33a21d3c8e78
-
SHA1
af813a58fbddc2be626e34b0a420780df47a7c16
-
SHA256
9c96d95c040bd664d17115d2ac07f677b58cfc5f23120f0924bd6a4a4feeac77
-
SHA512
4cb30c8908b8e4d80d3a7f7b0a30083303ba3eb7aed5e7f1f9672b423ac565942e4b39c8a2fe078bfeaadef4c6481ae7e91b807213be7d11195895d4403f8c2b
-
SSDEEP
3072:INvsKHpYFsLp1ZGsEK2prrX1fzkM0oH4lFrH:ckKaMp1ZGu2NZNyFD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e3c4f9deb85ec8ee51e33a21d3c8e78
Files
-
4e3c4f9deb85ec8ee51e33a21d3c8e78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jwgp8h Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 412KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 118KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE