Static task
static1
Behavioral task
behavioral1
Sample
4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64.exe
Resource
win10v2004-20240226-en
General
-
Target
4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64.exe
-
Size
900KB
-
MD5
d04dcb257b6860e360313ed874086bd3
-
SHA1
b6b3a838f1568d011b8d438aef0dd106d6ab3bc6
-
SHA256
4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64
-
SHA512
a9177b26b7bfd1bb1d4f5075b6368af769944b16d467e8b4edaa83f2a0ce333639984938474617f6df90f9e92c0628e2b8f4fb3ba0ec7e81b29992dd66b9a721
-
SSDEEP
6144:hcDGLFHnrMUj6SkvUF4aw4A0HxmSdiATmAXAgHSOxo9RBbLq52Y/Qg5ViG5WFNgs:hcyLF4LSkvUqaw4ELCXAZbLi55KK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64.exe
Files
-
4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE