Static task
static1
Behavioral task
behavioral1
Sample
4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd.exe
Resource
win10v2004-20240802-en
General
-
Target
4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd
-
Size
2.6MB
-
MD5
a816611a8f58d056389970bc8acb99a0
-
SHA1
0f037fea48efd8c75bbb2bc10b92d1cbef52eaea
-
SHA256
4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd
-
SHA512
8d61de7e1456d2a07c3175e2020510504bc254b62413f9ecab48d552683522d9fd53df99e5673a17773b4ce13e8d68311a96ff1a20fd67c532bc823775eb16cf
-
SSDEEP
49152:kdgph7GBfW0dgph7GBfWEdgph7GBfWxdgph7GBfW9dgph7GBfWWdgph7GBfWodgG:km77GBfW0m77GBfWEm77GBfWxm77GBfq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd
Files
-
4a20d0ba52e8fa4d3a79a2fd7845016f47147ee9e6f6c5695425b8c885c205cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE