Static task
static1
Behavioral task
behavioral1
Sample
4a4f8b30baa634e3181ad7ed1e45a2ae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a4f8b30baa634e3181ad7ed1e45a2ae.exe
Resource
win10v2004-20231215-en
General
-
Target
4a4f8b30baa634e3181ad7ed1e45a2ae
-
Size
208KB
-
MD5
4a4f8b30baa634e3181ad7ed1e45a2ae
-
SHA1
d5e0084233f5331072b600526187ec4d10e7a1fa
-
SHA256
10ec0d896facf50cc2100b205716c50fa8eb7cf8155a30d84d099c2a9239e2e7
-
SHA512
166dab7db65734ec781756910ffd7d36351e0c2b6e9645cc3924e0c26062faf12756bd81dba5ffa43ca495133202de88d9c704fbf1116eb297671201af10657c
-
SSDEEP
1536:q3qD3qRLK2Q0SJWkBcCpYQNpUW77uDdXxv3qD3qRLK2Q0SJWkBcCpYQNpUW779DP:QLPTB0ViQbIDdhhLPTB0ViQbTDdh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a4f8b30baa634e3181ad7ed1e45a2ae
Files
-
4a4f8b30baa634e3181ad7ed1e45a2ae.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ