Static task
static1
Behavioral task
behavioral1
Sample
4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0.exe
Resource
win10v2004-20240802-en
General
-
Target
4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0
-
Size
564KB
-
MD5
0143903ad9f44994731901e7ecf1538d
-
SHA1
a98ca9bfc78676638d692af35519f8d0d1025158
-
SHA256
4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0
-
SHA512
8adef07346d008b37171c67044388fff6e15559d760654fce13539478786967803f51daed8c6c5309f763848810189d96af9b59685abbfff8599370db86b4666
-
SSDEEP
3072:Z18RinudiP52xx67lLdGiHDosFcFmKcUsvKwF6uis2suH9opR4ZGZhsFcFmKcUsJ:ZqkgiPA6RYP4Us4uixxH9okQ34Us
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0
Files
-
4a621798ffe58168cf82ffd70d8a7360d2403b7b0a6d17a36751d2cd14b731c0.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PGllPZFG Size: 4KB - Virtual size: 4KB
etmQYOzq Size: 4KB - Virtual size: 4KB
NkQDFVfl Size: 4KB - Virtual size: 4KB
BzRWgoYq Size: 8KB - Virtual size: 8KB
WZWPbjOL Size: 4KB - Virtual size: 4KB
zheByWMr Size: 4KB - Virtual size: 4KB
DVisYruV Size: 12KB - Virtual size: 12KB
AlHQobmf Size: 4KB - Virtual size: 4KB
jWJDgZrN Size: 8KB - Virtual size: 8KB
ywcYPteW Size: 304KB - Virtual size: 304KB