Static task
static1
Behavioral task
behavioral1
Sample
4eaaa00845efb359d77eab68b6de789e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4eaaa00845efb359d77eab68b6de789e.exe
Resource
win10v2004-20231222-en
General
-
Target
4eaaa00845efb359d77eab68b6de789e
-
Size
420KB
-
MD5
4eaaa00845efb359d77eab68b6de789e
-
SHA1
834957c05f11428ec5de909961f892e0a3020a06
-
SHA256
b53c8a4d63ea9e721296a2113a421a179e1f58fb398442f8953fb3158cc51890
-
SHA512
19606ff855dbe3ed1ee733bdc506bcfe045b7fcd4bf5318315b448a6b1a6ddceabadaf175ab310db2e76422d15efaef71df5fe1f3f2e93d48c5393ce9706e8d6
-
SSDEEP
6144:WOksyj/UL2zbKVozQJLMEc5Qf5GZf7+V7Z6NfibzeyfTwhQpx9a6Ucf5XiD8EdcJ:iZj/E2zbeJLM3QRGN7+V7Z6NabHwMHn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eaaa00845efb359d77eab68b6de789e
Files
-
4eaaa00845efb359d77eab68b6de789e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 418KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ