Static task
static1
Behavioral task
behavioral1
Sample
4e41f6729e8ef43ca056bf694bcf5aaa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e41f6729e8ef43ca056bf694bcf5aaa.exe
Resource
win10v2004-20231222-en
General
-
Target
4e41f6729e8ef43ca056bf694bcf5aaa
-
Size
17KB
-
MD5
4e41f6729e8ef43ca056bf694bcf5aaa
-
SHA1
0786f1d0878b087a8c63d0776e93c2c67df12a4e
-
SHA256
e9b8af63b0318bf13a46583d3c63d4172aa4b115298d9aeb598a20bde8b39921
-
SHA512
a2ba61629717b1de6434dc93ba5b41b7c9a9d24a8d27bd05251d160889f69067e0351c44df2f6aacd7b1ddbf119bcaa92167778a27e951ea7b097a47be2f6da3
-
SSDEEP
192:JbWOewD17LhIwmjL1rnsNiXeH5V3PEPnzcRUiejuJSW+JgZnhgs7qAi5DSjMpiPS:JbWUD1eXdsNH5V3MYSinJoJcfQ5GP8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e41f6729e8ef43ca056bf694bcf5aaa
Files
-
4e41f6729e8ef43ca056bf694bcf5aaa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 243KB
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 245B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 245B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 245B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE