Static task
static1
Behavioral task
behavioral1
Sample
4bf50a3b9a2de2fd3e7a07c9a1381800N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bf50a3b9a2de2fd3e7a07c9a1381800N.exe
Resource
win10v2004-20240802-en
General
-
Target
4bf50a3b9a2de2fd3e7a07c9a1381800N
-
Size
384KB
-
MD5
4bf50a3b9a2de2fd3e7a07c9a1381800
-
SHA1
88acc805347ad6856b34e0b21cad63ecdf93ee0e
-
SHA256
f97932bb8d75d8239edadd768fa301261a246d5f19edcd3b879a1dc6237627a1
-
SHA512
e3a16a13609e6b2d80a6ff429b857b77c68e9e56fa8cd8a47efda5ab26bcae7199e79a8503988ca3f4569ef6e3b35cf1180ef294e6647c5d0fb0f01c4c6a56db
-
SSDEEP
6144:V/OZplJ/OZplP/OZplx/OZpl7/OZplx/OZpl4/OZplpBE/OZ8:V/MJ/MP/Mx/M7/Mx/M4/MpBE/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf50a3b9a2de2fd3e7a07c9a1381800N
Files
-
4bf50a3b9a2de2fd3e7a07c9a1381800N.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE