Static task
static1
Behavioral task
behavioral1
Sample
4e66b8598fa6337567c3402fa13dbf2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e66b8598fa6337567c3402fa13dbf2e.exe
Resource
win10v2004-20231222-en
General
-
Target
4e66b8598fa6337567c3402fa13dbf2e
-
Size
383KB
-
MD5
4e66b8598fa6337567c3402fa13dbf2e
-
SHA1
4c538617c6a17833e1156b27c71fe6f06901df9f
-
SHA256
f885443f7db4bbd46d7a65f1f528aea4cd8482615cf1e9fadb36b7de3af6a4fa
-
SHA512
93ec942b4f867b5a6d22a5b55a3d296a2b8dda8607c7947951393c7d6ebe9386534635e9e6509a4ae2af51877d1cd01c90d2429f4f3990467e93417fff5b2537
-
SSDEEP
6144:DtXKglv+Vzs6mXauC8ISk0hXJWSdx1HXzS/Sp9UtjUEFPL:DVlv+JqxCFSPhXrSG+yEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e66b8598fa6337567c3402fa13dbf2e
Files
-
4e66b8598fa6337567c3402fa13dbf2e.exe windows:4 windows x86 arch:x86
9fb3b0e5b49de5baa8db6b00b7f07149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord696
oleaut32
VariantChangeTypeEx
Sections
Size: 238KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE