Static task
static1
Behavioral task
behavioral1
Sample
4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9.exe
Resource
win10v2004-20240802-en
General
-
Target
4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9.exe
-
Size
1.2MB
-
MD5
94db1d8338fb3c9f917a5613db3d4071
-
SHA1
1514b3571a69d7873287b71ea85fbaaad730b627
-
SHA256
4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9
-
SHA512
bcb20cd62d9722caeb3d70770db63bd35754c0b1c8327a3a8db9babdc55f0729038f1f0d20aa657a909039d165aa3aefc22b57e4011a045f1fa64466b50b4106
-
SSDEEP
24576:MHl0lSkKuiI0FeIqgKglBRRt+GtlrgDBoCLTanYqUdQqVt/r:MFWSB7OIOglBRRtZvrgDBoCKnadvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9.exe
Files
-
4f34cddcd5792c3afff2880f5d84c8ea452b8b7d9ae5e38d1b98486227b4f0d9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ