Static task
static1
Behavioral task
behavioral1
Sample
4e3f282b564852754f57e36faa2eb819.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e3f282b564852754f57e36faa2eb819.exe
Resource
win10v2004-20231215-en
General
-
Target
4e3f282b564852754f57e36faa2eb819
-
Size
13KB
-
MD5
4e3f282b564852754f57e36faa2eb819
-
SHA1
40b1f7bf97729f253b8fa6a1aad82b09d1000d69
-
SHA256
301a221e49a02d9d8ea6c8021f3e7ad29cfe1744cc7368490373ee155fc45e98
-
SHA512
a477b1a1b323bace118114add3b1ab4b85c0b0c1102c6c7b561bd27770e4ec188601425760e96708d0d10737b9acf3dd18ff866d14d8b1d4b674a7df41a430a1
-
SSDEEP
192:CAfzwtHPMR2MDaVnVcOLCv4bBsRSZSrKKZc2L2mRMwB/0PADVvkh:CIkHPMU9uj4lxcGSL2wRJ0PA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e3f282b564852754f57e36faa2eb819
Files
-
4e3f282b564852754f57e36faa2eb819.exe .ps1 windows:4 windows x86 arch:x86 polyglot
a3ff211a9b02340753aa1007d0fd116a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetComputerNameW
GetConsoleAliasExesLengthA
GetPrivateProfileIntA
GetShortPathNameA
SetComputerNameW
GetConsoleTitleA
WriteConsoleInputVDMA
GetPrivateProfileStructW
GetConsoleAliasesW
SetCurrentDirectoryW
GetPrivateProfileSectionA
user32
CharUpperBuffW
wsprintfA
RegisterWindowMessageA
GetClassInfoA
SystemParametersInfoW
gdi32
CreateColorSpaceW
GetGlyphOutlineA
EnumFontFamiliesA
GetMetaFileA
Sections
.rsrc Size: 512B - Virtual size: 315B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.masm Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.masm Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 1024B - Virtual size: 721B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ