Static task
static1
Behavioral task
behavioral1
Sample
d4b4f8baff086dd1a1e7c261b71511aa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d4b4f8baff086dd1a1e7c261b71511aa.exe
Resource
win10v2004-20240226-en
General
-
Target
d4b4f8baff086dd1a1e7c261b71511aa
-
Size
48KB
-
MD5
d4b4f8baff086dd1a1e7c261b71511aa
-
SHA1
05d1f0b0fec7276354f7e9c929d7d9695697bd71
-
SHA256
26a562503164d5e26beb12251e087af2669622da167c214f4276ea24f090450a
-
SHA512
647ecd433b7b7ac51b4f5a0cde9789cf676d94ae964ae5002c1a567d1d4147d99de3c22a048c224a467cebded759c843fcf16a98fcd593a83c277fb2bbdb4c48
-
SSDEEP
1536:DXnZt6OZcikf7Pq/mAAECmf4/QcGpyiO5LPrB37rk:D3zF+i+q/ZbJfxcGptOl93Pk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b4f8baff086dd1a1e7c261b71511aa
Files
-
d4b4f8baff086dd1a1e7c261b71511aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fy8l0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fy8l1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fy8l2 Size: 166B - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE