Static task
static1
Behavioral task
behavioral1
Sample
4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798.exe
Resource
win10v2004-20240709-en
General
-
Target
4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798.exe
-
Size
608KB
-
MD5
414dc5eb0c47614a9992cb197e7c2629
-
SHA1
e96011f7fe6748042874825c48b6bcab41398374
-
SHA256
4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798
-
SHA512
5b85f28d258d8d195081d62e99aa05f9a5c02ce1af5e8061e1e63c6cbc863251b85719ac931550a8e80d0e00b03e6ddfb4d5200fc0abffea652ac31ab2a162a6
-
SSDEEP
6144:Atn9LnHdKXSHl6YYCT67sVoxhED4jRVp0CNeG3TNLCRLF:onR9N6aIsVAEEjCCwALu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798.exe
Files
-
4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ