Static task
static1
Behavioral task
behavioral1
Sample
4e946661ca643f4e474e110ed43dd17d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e946661ca643f4e474e110ed43dd17d.exe
Resource
win10v2004-20231215-en
General
-
Target
4e946661ca643f4e474e110ed43dd17d
-
Size
102KB
-
MD5
4e946661ca643f4e474e110ed43dd17d
-
SHA1
a7d9c9accc67e365414604821c77510c6cd2dcfb
-
SHA256
df2a22a4396b5b0ad0370da73a8499ce15b9da0362f1045d5686b4d90a138eaa
-
SHA512
60803f5615c57dc09c7e6fd1a6c7c4a38706a94b4f21ecdaeb12f7cb74578752548b51b969908f197ded4fe6356dfd46a2e1b6d97ebd80dd259e3925076af30f
-
SSDEEP
3072:DBYJBJbQhlyFco9mVhZ+zVIpAOfSKm/2h:DCbQGOo9mVhZIsFm+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e946661ca643f4e474e110ed43dd17d
Files
-
4e946661ca643f4e474e110ed43dd17d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE