Static task
static1
Behavioral task
behavioral1
Sample
4e8f639123677516120a712f61d16e1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e8f639123677516120a712f61d16e1c.exe
Resource
win10v2004-20231222-en
General
-
Target
4e8f639123677516120a712f61d16e1c
-
Size
572KB
-
MD5
4e8f639123677516120a712f61d16e1c
-
SHA1
658a8caaf6f88e825c01b05bdfb6e83657e3c635
-
SHA256
2438c31b3c8fbc6c59fde939577bd69f5b8acf739e96c42396a9bfb3151d9c99
-
SHA512
99ac1ae58d4e77646b3637d1aad8dd76b34f85fd558546b8c8a4f82525fe66c7380cfcbd59dddc676b5a21cd1ca1cbf9085ca70d4399efa26b581e36a6745a18
-
SSDEEP
12288:avp0VnLOzdyo3jQ6yOui4/mQoDJ+MvcpyQofMk4hok9sqV0UOo51eJcujr:h6o1OZ4/mQodPOyQoUk4NEo51Ec+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e8f639123677516120a712f61d16e1c
Files
-
4e8f639123677516120a712f61d16e1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 65KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
35640232 Size: 500KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE