Static task
static1
Behavioral task
behavioral1
Sample
4facd3c71b6e070f1004eae2d6dac59c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4facd3c71b6e070f1004eae2d6dac59c.exe
Resource
win10v2004-20231222-en
General
-
Target
4facd3c71b6e070f1004eae2d6dac59c
-
Size
272KB
-
MD5
4facd3c71b6e070f1004eae2d6dac59c
-
SHA1
5b9214c0bf00932eb4576e825f945c97a4718910
-
SHA256
e98bc9cbd67d0d7728da5193c05f16fd3e820a685fe0dfdd1fd92d61656082ef
-
SHA512
886cfd7810fa47501311cc70ec40431dc3ce4d92a7e9a31b5d95d1d021ce7fb63a21545bdd66b1e2a87a41e8c63a3d32968839e651d343f756efe991e8a00f72
-
SSDEEP
768:fA31WATlAydSeTOmu1vPN30H3XhCTnu2eF7IJwk/a3leGPiSmB:4rxEPN30BCTu207tTLqh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4facd3c71b6e070f1004eae2d6dac59c
Files
-
4facd3c71b6e070f1004eae2d6dac59c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE