Static task
static1
Behavioral task
behavioral1
Sample
4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7.exe
Resource
win10v2004-20240802-en
General
-
Target
4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7.exe
-
Size
2.0MB
-
MD5
b4a77cea5a03f4a34f8d5640cebd44ac
-
SHA1
cff95695ce0d401135206f3a7dda81b91d3c6b1e
-
SHA256
4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7
-
SHA512
3b5e2edcc9d9be7f141d42e4dc67405d6bf6f6b423f6d18c4090bf46d421dda8743a4fec3599a1fcb8813ed3f1b4d514864741bc50c13fd183b42fa71a51f5fe
-
SSDEEP
49152:GZd4ryFkp8Y4N1Pq3FKHv6T0x5E/aHJEt050R:G7qrpddVBTBR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7.exe
Files
-
4e96241248a8f9b7304190d21a081afb646f432d1ffbd3fbab7207515313fdd7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ