Static task
static1
Behavioral task
behavioral1
Sample
4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede.exe
Resource
win10v2004-20240412-en
General
-
Target
4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede
-
Size
2.7MB
-
MD5
f572e3d73ddb0240b6f68b116dc82000
-
SHA1
039d9d20121b5efed05819d2f330177087ebcec9
-
SHA256
4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede
-
SHA512
0030fdbe88ad7d4d4c98851b7596eb2e15d4d79d4dbc435fbe8b532e691cb9121d0008c3f6d8f630ee3f95a759985afca47db3e6b9ece005371fd14a2ad6ba5c
-
SSDEEP
49152:LM76/4pwS+IaAVTnInYTMu9HHnz6yejR+vZBayG0kdF/nagQQ:L/OwS+IaAxnIYTMwnnqjsBBDB1Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede
Files
-
4099a26e0e510326bc4ae8e4de8c5e165cfc5e50441cba0fd5eca2e8ff103ede.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE