Static task
static1
Behavioral task
behavioral1
Sample
c4650ad4383fcbe1ae27b269d41201ba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4650ad4383fcbe1ae27b269d41201ba.exe
Resource
win10v2004-20240226-en
General
-
Target
c4650ad4383fcbe1ae27b269d41201ba
-
Size
251KB
-
MD5
c4650ad4383fcbe1ae27b269d41201ba
-
SHA1
1cc2e798df0a9a760c85a4902878f75a022eb883
-
SHA256
13d3814274ca621c176a1692ff38a7b9db8a74e993f98a76de68064b3292918c
-
SHA512
c4e52a423697243e2b9ca268d9039c73d0e1a9f43f21ab9d872ee6937cbc129a4dac0063a3dcfef457f94e29712039b9e95ab830c60d95091c81c2d352dc8eae
-
SSDEEP
3072:jR7KnLTYQH6qxx8LMRSBdcYA9wsOXNngEfSGKKGfLlh0X4olwIDjzH9Pnoodud19:OaiReFtXOGKKGfLl1sH9PnoXd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4650ad4383fcbe1ae27b269d41201ba
Files
-
c4650ad4383fcbe1ae27b269d41201ba.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ