Static task
static1
Behavioral task
behavioral1
Sample
4efd470c94b878df7ec252e4259a08f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4efd470c94b878df7ec252e4259a08f7.exe
Resource
win10v2004-20231215-en
General
-
Target
4efd470c94b878df7ec252e4259a08f7
-
Size
19KB
-
MD5
4efd470c94b878df7ec252e4259a08f7
-
SHA1
55df01bb9d06a8a94cfca72818fad7de46a56842
-
SHA256
d149bc4981bd08d22c5ab134e219e7411a61c5b13807f1341093807cc353893d
-
SHA512
7516d7d422afd02ab9eb2a0b0f123ab3a7c8e5e6a366b386bb813b82d749ae0abc971edd9e7d2e3888d4631042958c3f162a5a0d347a96e683b208f71481f442
-
SSDEEP
384:c6Qk0T8BpqpulYsM4LnXXOpMgILlePEys7DXwi+T91sSX+IY6Wy7wfAmc:uk5hnXXpQsF7Lwi2GlIlWIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4efd470c94b878df7ec252e4259a08f7
Files
-
4efd470c94b878df7ec252e4259a08f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Adata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Adata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Xdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Sdata Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE