Static task
static1
Behavioral task
behavioral1
Sample
4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb.exe
Resource
win10v2004-20240802-en
General
-
Target
4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb
-
Size
10.6MB
-
MD5
fa17fac1b03b3151a415a0b3e7e44faf
-
SHA1
8054861559858e6a2485f93909818131135f4364
-
SHA256
4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb
-
SHA512
137677aa5d866bb4a4247adddd1b63b0b0966955b526a15594d97d7c11d567b402945d3a5d81320a53121d16be2e4c46aa07cd8e15f86ba90c1e82f5367487a3
-
SSDEEP
196608:KcOxQ9GuLB6pPQ+EJ/NbAcX5VLCHbBzHxHQ4cLQELJublZO6+U8:++9GusdQ+W/RX5VcRHQvAOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb
Files
-
4a7308b994d5bfd5f1b1d0f2f47d3dbd5118a6ccd1b97d94bf3b4ce97fbb79cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 224KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5.7MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE