Static task
static1
Behavioral task
behavioral1
Sample
4ee98cab53101e3033dcad1f978057ca.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ee98cab53101e3033dcad1f978057ca.exe
Resource
win10v2004-20231215-en
General
-
Target
4ee98cab53101e3033dcad1f978057ca
-
Size
41KB
-
MD5
4ee98cab53101e3033dcad1f978057ca
-
SHA1
55ab56fd4c01fab1cf7d59419d70d855d107e828
-
SHA256
4ea1fd1b31455af4b627868de88e4120fda2cbbbbaf4242e6c016711f2de4a5c
-
SHA512
d2a89565d461661781f38dfc1fa5d6aad9bc930f31e7dde838733bfe5a7a14a632c7d415b6957269d71f2891a8222aed2f5995faa483b0711e3d7b9d4b6152bf
-
SSDEEP
768:vOb0gOHUeJR4B3iTil78/fop9YF1ryIihBmuiCqJfu2WWGT:mb0bHJR83fl6w7YFcIiLhiCqt6T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ee98cab53101e3033dcad1f978057ca
Files
-
4ee98cab53101e3033dcad1f978057ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.sdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 851B - Virtual size: 851B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ