Static task
static1
Behavioral task
behavioral1
Sample
4fbb80c6d18171b283324eb546fef31c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4fbb80c6d18171b283324eb546fef31c.exe
Resource
win10v2004-20231215-en
General
-
Target
4fbb80c6d18171b283324eb546fef31c
-
Size
50KB
-
MD5
4fbb80c6d18171b283324eb546fef31c
-
SHA1
2131227e6c680b3dcbb118c3110e10893ed9831f
-
SHA256
21755bac174232b830f3752865fab979f3edc4d5dc6a1b1ac065b74192120635
-
SHA512
4d2292e232503e5b57b77d8b9e8e74a5e47f3a4e90a7c23fea55a5d2fb3ad846c1351cdeefac46cad2666afc578984a5ae0ed1ac2e1d048c2237c8d06adcc813
-
SSDEEP
768:GYhN/5eTuwUxwdYw7CWjw6dcrE3Z3K6ZZUCvgr3PvP+x9wH8Eh1ZkoU:lhRfwUzwGW0ccr0Z6+ZUCvgzHPa61ZkV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fbb80c6d18171b283324eb546fef31c
Files
-
4fbb80c6d18171b283324eb546fef31c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ