Static task
static1
Behavioral task
behavioral1
Sample
4fe11b76e6e2d2fb1e3aca6489530b08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fe11b76e6e2d2fb1e3aca6489530b08.exe
Resource
win10v2004-20231215-en
General
-
Target
4fe11b76e6e2d2fb1e3aca6489530b08
-
Size
398KB
-
MD5
4fe11b76e6e2d2fb1e3aca6489530b08
-
SHA1
6f229c7c9f22c6a31c8fc549da79491a4e400dea
-
SHA256
d3c263d95e6969b6a4d3849c4172a2242d97a57509c81197f360141b302193ca
-
SHA512
cd801eec1dc8fbb3c1a6a2e03f3a3c0f179e80b585eb2de473471e81b8533ca7a9afe34d09bcfbb15c2bf598bfe808261cbbc881fde9318d4b43687ca5d22a0c
-
SSDEEP
6144:L/ZHLtVLgoX7E+CSiKlvkQMSHFh7338MTKf9JFWgnVW5GJZ2tNYLj8MfsBf256:LhZlgoxlvn73KXFWwVzYKj86sBf2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fe11b76e6e2d2fb1e3aca6489530b08
Files
-
4fe11b76e6e2d2fb1e3aca6489530b08.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 190KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE