Static task
static1
Behavioral task
behavioral1
Sample
4ef712d496ad21e54632a3f0abf08449.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ef712d496ad21e54632a3f0abf08449.exe
Resource
win10v2004-20231215-en
General
-
Target
4ef712d496ad21e54632a3f0abf08449
-
Size
64KB
-
MD5
4ef712d496ad21e54632a3f0abf08449
-
SHA1
4a99ef46b86b7053d7feccfe52ee06153dd5e9dc
-
SHA256
a412c9a9de3aed65817baee4a692f7fe82d7f050157f97347abc2247c3818609
-
SHA512
a8ee73b5ea99098a1b29d1e3fd33accb57453010aa296a2c1a6556e5fda435adb62f97c8ebc584c83e4d74a7a4a6e94a774c08711f38a665c36152d09cfd1ee5
-
SSDEEP
1536:FMvDpzhV6B40DuWj1v1V85LQiGd/deO6XKhbMbt2:ulzhV63ui91V8Lud4O6Xjt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ef712d496ad21e54632a3f0abf08449
Files
-
4ef712d496ad21e54632a3f0abf08449.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdiapk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ