Static task
static1
Behavioral task
behavioral1
Sample
4fa630c03a69d492c3efa026f5e8a2f2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4fa630c03a69d492c3efa026f5e8a2f2.exe
Resource
win10v2004-20231222-en
General
-
Target
4fa630c03a69d492c3efa026f5e8a2f2
-
Size
506KB
-
MD5
4fa630c03a69d492c3efa026f5e8a2f2
-
SHA1
e00a128151ea8596be177c87b62b14445e5eab93
-
SHA256
b66399b08599fd7f0ba4bb8e973ce07c7bab7fcc12dc1e5e3200b63ac3a2e080
-
SHA512
c5f21ed0658d267a76c60f1827f60dd52e5ddff94447268e62d08372a1d8a14b09b774e88c272d7c18cac8e4f4c1c336c0f027c34c9ee2a67c5d114b62254150
-
SSDEEP
12288:6KDUwSs6FLNuGVwpqIvWPLI1/BRmG9XVQ0B3M:6aUZ1FNJVy1vOQLhK0Bc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fa630c03a69d492c3efa026f5e8a2f2
Files
-
4fa630c03a69d492c3efa026f5e8a2f2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ