Static task
static1
Behavioral task
behavioral1
Sample
4e729b20790c2b3cdca9c7ce3d30490c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e729b20790c2b3cdca9c7ce3d30490c.exe
Resource
win10v2004-20231222-en
General
-
Target
4e729b20790c2b3cdca9c7ce3d30490c
-
Size
385KB
-
MD5
4e729b20790c2b3cdca9c7ce3d30490c
-
SHA1
323fcff9d4d5205ed7c1017f0d50355cd6789b2b
-
SHA256
7edf68e12759d5662e56e1555751f2604a7704a8e4c240f10fa3c3f95e76a12a
-
SHA512
72ab162ec0238ba27d235d0e8334ebafbccc1674013751d8df6a2081b2bd84ebb5bbdf864a0845221c48178cfd5ee60e0a857e9558e73b639c87d8f86fc88d20
-
SSDEEP
6144:viCm3gC7lhLltdchsSi7XB6uUvgGkW6v3O/I2yXB7HjDVe4zuMN70m96ZxLnz1PH:vipwCPLTxVHHAI2aLjDXzuMNf9y9nz7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e729b20790c2b3cdca9c7ce3d30490c
Files
-
4e729b20790c2b3cdca9c7ce3d30490c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ