Static task
static1
Behavioral task
behavioral1
Sample
4fd364e00a98ce49205043cbbd2bee31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fd364e00a98ce49205043cbbd2bee31.exe
Resource
win10v2004-20231215-en
General
-
Target
4fd364e00a98ce49205043cbbd2bee31
-
Size
38KB
-
MD5
4fd364e00a98ce49205043cbbd2bee31
-
SHA1
804ebbf125de01ad6651d81973bc8950aac38076
-
SHA256
630a9b9da20ebbcbf5f48c97050a965927ae7e6fa306f1f3b932f8d9e3e2354b
-
SHA512
b92e837ad017c014a2bdc3828ef2af23e77eeaeb44abe3c5edc5bacc65e4eebd6ddbcfa0d047038e5b86f5eb1b9683d0d7596ec9953a732c0762ad8ad4945d2e
-
SSDEEP
768:8vR1XXw9btkGXyT8L6qdaQAOCkliE3V3KJT6nbjq:O1wPiT8DkQAOCqrVKJTZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fd364e00a98ce49205043cbbd2bee31
Files
-
4fd364e00a98ce49205043cbbd2bee31.exe windows:4 windows x86 arch:x86
c347446e6dd81da54b206f9b8b1df51c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetLastError
GlobalAlloc
msvcrt
realloc
srand
ws2_32
gethostbyname
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ