Static task
static1
Behavioral task
behavioral1
Sample
4edb204a6160272ec03a52c90e1b70fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4edb204a6160272ec03a52c90e1b70fa.exe
Resource
win10v2004-20231222-en
General
-
Target
4edb204a6160272ec03a52c90e1b70fa
-
Size
220KB
-
MD5
4edb204a6160272ec03a52c90e1b70fa
-
SHA1
388764cb9b87d5904b248b36f83c80cebbb03b0e
-
SHA256
77de23c9d1e6c616e09a3db45c583703129f3b31ad80ec7f0e79c3244c4d2cb8
-
SHA512
9ed6dffd1964878e3857ab64a4f3c3054eafa7afe574da5e78e17a8c224de2d4c79f4f7ffb69bc5496f250f78e4d887a549b281b13725fe26b6bd3648ee16642
-
SSDEEP
96:j2pzxrABeR9kgrJWjXdiwH2cQGinVBaX/jPSW:qltABeujXdiwH2cQGiQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4edb204a6160272ec03a52c90e1b70fa
Files
-
4edb204a6160272ec03a52c90e1b70fa.exe windows:4 windows x86 arch:x86
da139742c238d152a0621cd483e6e561
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
ExitThread
GetCommandLineA
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ResumeThread
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
Sections
Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE