Static task
static1
Behavioral task
behavioral1
Sample
c4f7203549bea5d54fd9c6e1833a5b88.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4f7203549bea5d54fd9c6e1833a5b88.exe
Resource
win10v2004-20231215-en
General
-
Target
c4f7203549bea5d54fd9c6e1833a5b88
-
Size
8.4MB
-
MD5
c4f7203549bea5d54fd9c6e1833a5b88
-
SHA1
d64afaf060229aed37552c0973047e4026759669
-
SHA256
8f1e0e0b2ccaa526e85d18be276237ec7a3e710e9a70e7e8e844f364668b792f
-
SHA512
4c122b5dd941db545d600b572bc9c07623a76365c2aff797effaf070ce32b1984e46f159420ffd41bc956d099ef2b19430d64d10c11cfa0cd8fdb2490c3cbc67
-
SSDEEP
196608:+WahUGXLi0xMA4E6yDlZ9BQzjDapI5ztSLaf03:+1UwLi016KRBQzj+pcztN03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4f7203549bea5d54fd9c6e1833a5b88
Files
-
c4f7203549bea5d54fd9c6e1833a5b88.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ