Static task
static1
Behavioral task
behavioral1
Sample
4fab3f2817e13c2d09ef169db484a832.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fab3f2817e13c2d09ef169db484a832.exe
Resource
win10v2004-20231222-en
General
-
Target
4fab3f2817e13c2d09ef169db484a832
-
Size
16KB
-
MD5
4fab3f2817e13c2d09ef169db484a832
-
SHA1
0bd5a3612f55865d0d5b72f27eda345b884d1815
-
SHA256
a0bb7e4cc51d4b288b35b63ecb46277f1340c6bdeb4e17fba7deef858484a254
-
SHA512
57eabf4579728c8cf38d598eba6dd0d654ed5cc45a593dc796ba410e953029fd3e094ba973ea7bda10fcab7ee91386e02f8aee9a4dddb9a0a6fb6b13a665b3cb
-
SSDEEP
192:K1heAPkC0OroReMSjzUWvtH7uaQWHRDP:K1BroRvSXUO7OW9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fab3f2817e13c2d09ef169db484a832
Files
-
4fab3f2817e13c2d09ef169db484a832.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE