Static task
static1
Behavioral task
behavioral1
Sample
4f79ef14e00980909207ebfed8d5487c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4f79ef14e00980909207ebfed8d5487c.exe
Resource
win10v2004-20231215-en
General
-
Target
4f79ef14e00980909207ebfed8d5487c
-
Size
84KB
-
MD5
4f79ef14e00980909207ebfed8d5487c
-
SHA1
867b908de9c3c40b7ba691b2a1b62cf4a3b0ac26
-
SHA256
73fb7b0dcb1e164393d3540852034b133e196c37fa5d24f0a54339170de45c05
-
SHA512
b604eb4cd159f7f3abb4729096986ac38531354edbaa6361e3d0e50c2645c754531692ade8468e33bbc5baa12fffb7531bad9a077541c6cc94efa2c732b7b832
-
SSDEEP
1536:1qGvDklU027qCqZ/mTwKf43hBiw03LZd+ZrasU:1tDkilWZC07Ud+Zra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f79ef14e00980909207ebfed8d5487c
Files
-
4f79ef14e00980909207ebfed8d5487c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ