Static task
static1
Behavioral task
behavioral1
Sample
4e5a7d85cc5fa335351acf279b95168e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e5a7d85cc5fa335351acf279b95168e.exe
Resource
win10v2004-20231215-en
General
-
Target
4e5a7d85cc5fa335351acf279b95168e
-
Size
5KB
-
MD5
4e5a7d85cc5fa335351acf279b95168e
-
SHA1
76f248a72d5a0d5e9d61425d2c44fefce7e7d17b
-
SHA256
4a20317aa5277d2e7102873f98ba351e08e8c0b63e09a4a88a67f7c0928d346f
-
SHA512
3effa09dc0f3c823116f5c24d82631bb6b21f7f029a8db8085afaa1dc807cb817a479a1bc211d1edd50cf69e3654be52050ad1c9823d7e84926d62518330e50b
-
SSDEEP
96:p07jxGacBZgUIG4kTG1ZU71DrLBDDVtU:p+qBmLEVDDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5a7d85cc5fa335351acf279b95168e
Files
-
4e5a7d85cc5fa335351acf279b95168e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE