Static task
static1
Behavioral task
behavioral1
Sample
4f0c8a394df78f76069a11be42fa7f75.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4f0c8a394df78f76069a11be42fa7f75.exe
Resource
win10v2004-20231215-en
General
-
Target
4f0c8a394df78f76069a11be42fa7f75
-
Size
167KB
-
MD5
4f0c8a394df78f76069a11be42fa7f75
-
SHA1
951846b8104ebb19ed6f2b6df21b735c7c79b779
-
SHA256
37f00433652ef811e5a666c23aafc3261dd2711fd641e8e89019e89f93131d11
-
SHA512
0aac65e5d8d14a61ff6976f72aa2bc091926d85fa0e5598f4f9405b6ec4b3d99299aaddc6d4ea58d26ecf62679c666b48ae58fd09d1427a09b4c3a14a1a1ec40
-
SSDEEP
3072:gKu76gdJiJEZ0GzXl94NPtFRiSfV7/iGZIW3o3B4czn9lqJE+:gKuGyiJC0Q6pRiwVew3Ov90J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f0c8a394df78f76069a11be42fa7f75
Files
-
4f0c8a394df78f76069a11be42fa7f75.exe windows:4 windows x86 arch:x86
9b760feffec4fca9c313889f9a05ee36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
Sections
.text Size: - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ