Static task
static1
Behavioral task
behavioral1
Sample
4f9277b0c8a3677e3649fa8502f0cc8a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f9277b0c8a3677e3649fa8502f0cc8a.exe
Resource
win10v2004-20231215-en
General
-
Target
4f9277b0c8a3677e3649fa8502f0cc8a
-
Size
87KB
-
MD5
4f9277b0c8a3677e3649fa8502f0cc8a
-
SHA1
b20d533dd0b08440c03e255db0bb4d4f46ec9cbe
-
SHA256
ed983ec209b28facb3936ed9cd2102546ad01b5bdffc01ef89d95d5379147765
-
SHA512
f5d08cabd0b58e46a818bf9306bcf463a40be80e5447ee64519bb7a5a0c493b2adeb9135364cf0923965601925e0dad0776733aa5af4f59d36f7c67cd552110c
-
SSDEEP
1536:6hcK+yzt3TiR5lxp/DkitXZJX7PvJB+6wd6lgMvPHNMUPHMWD9MXaL0N9icQ/iP9:6hcK+0te/lxp/DkitXbDjNwd6lp6B29M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f9277b0c8a3677e3649fa8502f0cc8a
Files
-
4f9277b0c8a3677e3649fa8502f0cc8a.exe windows:4 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
� Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Stone Size: 283B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE