Static task
static1
Behavioral task
behavioral1
Sample
4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e.exe
Resource
win10v2004-20240426-en
General
-
Target
4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e
-
Size
11.6MB
-
MD5
f0fdba094750552bc5b69f2af1a97023
-
SHA1
5f84ddc3b1cf0c923f29b0d63a0699b219b7f599
-
SHA256
4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e
-
SHA512
30ff12075cd6d0562213522fae764429cd11ff85275f0b95adf7b2f1a620b514cd37d7b3d1ddc835daac09a46d5a3ce4300f514976947c0f728f25f474fe6508
-
SSDEEP
196608:FmFhPC5i63At84RGALzCK+CUZhz1MGy+exakWim/karHKf8I1TaDi86OWrinxpw5:kFhPice4ReRCUbz1MKLklm8PfDTZ86KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e
Files
-
4e444483b185e1f2026312c150b595b35fd34779eb8de953e0610edf79d4095e.exe windows:4 windows x86 arch:x86
2bd3ddd6197587f1818db6566286c11a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
SetUserObjectSecurity
advapi32
InitializeSecurityDescriptor
Sections
Size: - Virtual size: 10.8MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE