Static task
static1
Behavioral task
behavioral1
Sample
4edcd0bccdf36311e56f7a0abfc58a67.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4edcd0bccdf36311e56f7a0abfc58a67.exe
Resource
win10v2004-20240226-en
General
-
Target
4edcd0bccdf36311e56f7a0abfc58a67
-
Size
407KB
-
MD5
4edcd0bccdf36311e56f7a0abfc58a67
-
SHA1
5571ec2b92ae49c0a248469400abf93c11bc73f3
-
SHA256
dfcda277f7ec2e90d242da4e39d680c278cb822fa718b0a31a358d66f7b7a09f
-
SHA512
6c4ddb2f0f4d0ea0a537f226ad0c2c26a621bc8bd0525351a055aa6c847dccc5983a622404bd7b8d29042b9554c77948242b1ffad588773e17b4a21cbb64cd85
-
SSDEEP
6144:aDOxZXrSHXUTsiJcsSM0lo3uXfVBz2pGhTSPVLB4BKrim0T8+nzA9PCezWpg3m:lXa8si5SdV8cWtLW4rGQ+zA9qqjW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4edcd0bccdf36311e56f7a0abfc58a67
Files
-
4edcd0bccdf36311e56f7a0abfc58a67.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE