Static task
static1
Behavioral task
behavioral1
Sample
4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5.exe
Resource
win10v2004-20240508-en
General
-
Target
4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5
-
Size
476KB
-
MD5
3dd146201e52d648839ebb0d5b24a6da
-
SHA1
a066a7fc9d2c22c16d3d6a89b4737b3d93b117fe
-
SHA256
4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5
-
SHA512
18f3e8681ff97dcd6e657fc018fa995fea66b1be28c30d81c5457b2be20055ee65d8459c9f87a30512db20eec8a0094b2f4b4896f3351ec95c2f44809457de58
-
SSDEEP
12288:aO4rfItL8HREk7rNE82rKNe4gF/bjMDn87K9wlsDpVFd:aO4rQtGREArNF2+s4g5jf+9wlsDpVFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5
Files
-
4fafa080efbabcdd0d2e8efb4164c24f408a83dd06c2e10e8295028f2e728af5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ