Static task
static1
Behavioral task
behavioral1
Sample
4efcf4ed9ec99c98ac98aba8b9089819.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4efcf4ed9ec99c98ac98aba8b9089819.exe
Resource
win10v2004-20231222-en
General
-
Target
4efcf4ed9ec99c98ac98aba8b9089819
-
Size
680KB
-
MD5
4efcf4ed9ec99c98ac98aba8b9089819
-
SHA1
44b7fe1edff12a1f568ca232389a1a691338c160
-
SHA256
b1920e441ab5df57a65683058a7d58b87fb801207d0234109ce257eecd7ecb4b
-
SHA512
5820cbfe826201d9cc6e34d6cbe31767b68b7019ba733f51fbe271bd2ee4515ae7b1cd55279d7b26838ed17d3d91b1e304a63d53215b81d3675e34c920e19030
-
SSDEEP
12288:78yJkrXOK9F1NoZkj3h4DZpvnNHB4eLX3ct1EDPsGdIVSZ:ZJkd9F1W6IJB5LX3c1Z8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4efcf4ed9ec99c98ac98aba8b9089819
Files
-
4efcf4ed9ec99c98ac98aba8b9089819.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 212KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 448KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE