Static task
static1
Behavioral task
behavioral1
Sample
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe
Resource
win7-20240611-en
General
-
Target
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1
-
Size
1.3MB
-
MD5
8ba2edb1c1cbc3a5e2d493737b95023c
-
SHA1
d40afaf7d79ccbcacd07d717baa036dbc5735a5f
-
SHA256
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1
-
SHA512
6753db224c2e1e51976c70e61d3a2b8985a79d8d51675a8ac49176e6acfdece514cdc71d24ae1a0bd3017d4721eeffb81f49de76ac7317967892db7c1287b73f
-
SSDEEP
24576:0+LBbHYoxG99ma+09ev4/QwQgN2K3yWds0JkKyVGNnQ3v0lvp:00DG99HdR/QlVadsLoNQcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1
Files
-
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 629KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE