Static task
static1
Behavioral task
behavioral1
Sample
4e53690f0e4e9be4cad5c3ddb9a9b0bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e53690f0e4e9be4cad5c3ddb9a9b0bc.exe
Resource
win10v2004-20231215-en
General
-
Target
4e53690f0e4e9be4cad5c3ddb9a9b0bc
-
Size
39KB
-
MD5
4e53690f0e4e9be4cad5c3ddb9a9b0bc
-
SHA1
dd607c099226314bdd4ac0bdc239122b93276ab9
-
SHA256
ffdb9fc89bea49cf08bc23954b0e141348fa5249b2d78fc27097c167eb48cbc0
-
SHA512
8864f68e77838a3d18779f5d20d8c34bb00191f9d073e40b618df462f27ac3ee0e89f0906a7300a6e87d2b4fe72fb27ae21e862416870ea8bbbbc4aded97b33b
-
SSDEEP
768:1AVN/2efs1KLDNfVarVY2rmwOVYa/NylFmjQKiLPkzfu82bS1pu6BJY:WVzjLdodaNUszirkLASDu6BJY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e53690f0e4e9be4cad5c3ddb9a9b0bc
Files
-
4e53690f0e4e9be4cad5c3ddb9a9b0bc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ