Static task
static1
Behavioral task
behavioral1
Sample
4d94121773ea73330d9fd0d1894bad44.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4d94121773ea73330d9fd0d1894bad44.exe
Resource
win10v2004-20240226-en
General
-
Target
4d94121773ea73330d9fd0d1894bad44
-
Size
65KB
-
MD5
4d94121773ea73330d9fd0d1894bad44
-
SHA1
0a23a2dcc550dbcd935ec30fc2451265a905e273
-
SHA256
7c56f708f5d10f6767441e60fc1e5de089357f8bb063c434de4dcf2110fd89f2
-
SHA512
dbb28112d5cbbf8a14582d860f30ec8a1e233bb14207d41b0a131ace661c3405adbe0adaf3cc4a9ff0f727b78c258c636432a6598547c08029fc420235eb00d7
-
SSDEEP
1536:icdlMrYL/1iRVYUroNyJWZi77oAJ9B6MP5EFZ3t9sJo:flxiRVYRyJWZPQxEFRL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d94121773ea73330d9fd0d1894bad44
Files
-
4d94121773ea73330d9fd0d1894bad44.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pUNKVNsp Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UzBUtnck Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE