Static task
static1
Behavioral task
behavioral1
Sample
4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549.exe
Resource
win10v2004-20240226-en
General
-
Target
4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549
-
Size
1.6MB
-
MD5
4011e2c22f217748bb72c8e6cc60ebce
-
SHA1
a32e4715c9d12e0d02f7ebc153ca045fd49d8dce
-
SHA256
4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549
-
SHA512
d257638ce325e7ac6d4ec574d858a1b2685ffb8e5c49282ab3c35bc928542f5a088d0498e19ea64b73709a6803382561aca951d03355b56d5171b6ff8df1e3d6
-
SSDEEP
24576:27HY6HNzgfRKlHI4ru2UFocRCjF/DzkpZ/zet48lrVwVye4A1e13ori0BT:274IgfRKlHZu7NYxDAdsrW94Gri0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549
Files
-
4394e49ca55675502c2e23c544d6d35c19d49fe36834f46f4e63f0d7719dd549.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE