Static task
static1
Behavioral task
behavioral1
Sample
4b468134ffe5c57fd93bf51347f84ff0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4b468134ffe5c57fd93bf51347f84ff0N.exe
Resource
win10v2004-20240802-en
General
-
Target
4b468134ffe5c57fd93bf51347f84ff0N
-
Size
4.0MB
-
MD5
4b468134ffe5c57fd93bf51347f84ff0
-
SHA1
bd322a76e20b60aba387ec338574ff0697088fa3
-
SHA256
e2c8bed5e6bfefdb6fd7ec750a5b6c9820256c43eb5762c1cc65cecc91a25cf7
-
SHA512
fa1a591de3a9a780d9c14dbe5d83bc2f1de1757005bde5e7f7fae1bfcd28affe406d55997c69a9ff5e27c0fc547fe0aba0ee47c5de2a953ddecb21c3ce8e5561
-
SSDEEP
49152:2o5I5K0lbmXj1lxBcIsiwaejoe1t7kKwEG4j5ZNg9dGsylEjq8lEy8woa8FnOTfZ:28R0sByboelwEnnIR8wB8FO3Npd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b468134ffe5c57fd93bf51347f84ff0N
Files
-
4b468134ffe5c57fd93bf51347f84ff0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xxek0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxek1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxek2 Size: 423B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE