Static task
static1
Behavioral task
behavioral1
Sample
c4b382fa23ed9d389a3914c841ed647d.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c4b382fa23ed9d389a3914c841ed647d.exe
Resource
win10v2004-20240226-en
General
-
Target
c4b382fa23ed9d389a3914c841ed647d
-
Size
385KB
-
MD5
c4b382fa23ed9d389a3914c841ed647d
-
SHA1
97b29551aba1149c0da7dce5ed3a9ca9962bd85a
-
SHA256
dd5ab3c38318a41a0d28fe4b789241e32eb157dc8fcfba8e8a6976f4e0101688
-
SHA512
7c449e4aa1feb750bd51f16951289c81cd49e0d7df7fc5459f2c301586c83a71ac7929e2a80cff934b47d2997df6bba1a7665e31fb943b31ff684c95f1da2551
-
SSDEEP
12288:dQTNnbZP/tIdOCFIp63Hrrw5z8eBf40B6p8sB:KTNbZHtiAdPf40ILB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4b382fa23ed9d389a3914c841ed647d
Files
-
c4b382fa23ed9d389a3914c841ed647d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ