Static task
static1
Behavioral task
behavioral1
Sample
4f4b64be1d630c30aa4eec7a7c4de329.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f4b64be1d630c30aa4eec7a7c4de329.exe
Resource
win10v2004-20231215-en
General
-
Target
4f4b64be1d630c30aa4eec7a7c4de329
-
Size
171KB
-
MD5
4f4b64be1d630c30aa4eec7a7c4de329
-
SHA1
ba25cdc423ec38252f22bb52a8ab3cdd39b80043
-
SHA256
53abada592934355e7da1e7a25705482057d31862da9cf73da1772cd9829eb52
-
SHA512
2f635f4ef9d691a26a37c20fb366a0c52c7a7b12c275ec75413ae91990b46efb860693913064027bd0d15524216205b2ae98f7ea3eb82c967d666f62512c54e2
-
SSDEEP
3072:d5/e4MuBiUuxEuhD5O4UCvH+xBNMEQvPW2y0lbhBHND//SUV1oOKRc1XmwUcn:rguB7KDhH+x7M1v+TmPt/SG1oOH1mcn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f4b64be1d630c30aa4eec7a7c4de329
Files
-
4f4b64be1d630c30aa4eec7a7c4de329.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.aspx0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspx1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspx2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE