Static task
static1
Behavioral task
behavioral1
Sample
4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d.exe
Resource
win10v2004-20240508-en
General
-
Target
4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d
-
Size
14KB
-
MD5
0bad43bbd46a3460bf81d4985f69a9b5
-
SHA1
7045af9d4320a01ebbb86aaddec3a538fd42ae1e
-
SHA256
4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d
-
SHA512
00d04cee9d3f4d050c43eebf9647b7b8460ef5d68ff99e86db2554781869dba0a0e730790f3025ead0b3338459168271c1778cca660d6716d722de15cf50ccfc
-
SSDEEP
192:eFNB84yEa9QPkEn93be3PiNTtEMeMNPqDE045HQ:i84iQPkE1ykNiDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d
Files
-
4cd69af1e406722e762c64864d576ad1d68e736abf9b42cd1079ce1ef3d6275d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ