Static task
static1
Behavioral task
behavioral1
Sample
4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79aN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79aN.exe
Resource
win10v2004-20240802-en
General
-
Target
4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79aN
-
Size
160KB
-
MD5
f250b239c5315637a5d64cf476e261c0
-
SHA1
e2c1fc3a0aaf1314bac0e828995c80d03d158844
-
SHA256
4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79a
-
SHA512
7703a493f3032a1064f67bcf29c7710c8e146fa866e914b1790cf9dd4c3a85d778297c1feb896d669139636478ef4d2bd7959380ca2916b7a1a6e3d05b142347
-
SSDEEP
3072:xy4a7KO6y3Gz7NbdfLG+QNq8xUaecC0iWry8uGyvPyVCicb/n/vtEZ1tAsoC:xyK3EAHy+Qg8xU3wyf5PyVIb//inAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79aN
Files
-
4f8a051b763345004eae0f9c1a479e23be8a9028855818637541eeee7486c79aN.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
1.3oh.4e Size: - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
on61wc2v Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkqhfnga Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
042uutr4 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE