Static task
static1
Behavioral task
behavioral1
Sample
4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4.exe
Resource
win10v2004-20240226-en
General
-
Target
4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4
-
Size
4KB
-
MD5
1e24513d84b3ec76027511990fb2540c
-
SHA1
c08a3ef0f63600d88d03fe2cf62d7e73946873bb
-
SHA256
4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4
-
SHA512
8ac2f8ecb713fa6d92d7ed562b45c80e5be94db61a1f76b1433467cd6a0437fe71de638341e274f48f39a92f265f1b52226e05b05d2024ca3fe22763831cdd38
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4
Files
-
4d679432056de0ebab644ce7cd65ddcedf4d81cad4fa63b980b2fb19e88b93d4.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ