Static task
static1
Behavioral task
behavioral1
Sample
4e284079db4141adf9ac627c17e0e90d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e284079db4141adf9ac627c17e0e90d.exe
Resource
win10v2004-20231215-en
General
-
Target
4e284079db4141adf9ac627c17e0e90d
-
Size
4.2MB
-
MD5
4e284079db4141adf9ac627c17e0e90d
-
SHA1
d32d1759038f813221de1f25359983cee0f3808f
-
SHA256
6d5cc677e2b64519299ec931f9c2247dda93907f7aff5c6ff82676ff7628e9ea
-
SHA512
cad483d4e96045e3701d1b45f724d89e0e38bcd9d5eea23178713fb9b1d05b7acef1dc2553e319f43c96373f3c0d5c8e22187cbd606a577ecc967580d9c92652
-
SSDEEP
98304:R9Mq3STlFuIbpXXdl2zilgKQ82UVoBkKY3K13eFoi7nm:R9+pRbZr2Zc2iOB+KxKo+nm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e284079db4141adf9ac627c17e0e90d
Files
-
4e284079db4141adf9ac627c17e0e90d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ