Static task
static1
Behavioral task
behavioral1
Sample
4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8.exe
Resource
win11-20240221-en
General
-
Target
4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8
-
Size
2.1MB
-
MD5
c2baa5ff3794d2f0231fcad37d9f90d7
-
SHA1
b348d77b9247c183d138e32fa3b995fe11c03cb0
-
SHA256
4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8
-
SHA512
3c097a4640127daf2c654420e0f25b82f2cd1211199fba42fcc5bab3d7fb435be3f3187306c5d95c11cf2566a88905f65704ebb795b69e549a811ef8ce5bec8c
-
SSDEEP
49152:32ZXipiIqJHyt28w2F9e5VNejRis5+yC/gSOMrn:mZXi4bHyt28wi9kVUjXrCoHMrn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8
Files
-
4cd624d40222a1ab59d335d16a2ddbbf8aaa5006be688040e954d156ce33cfc8.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ