Static task
static1
Behavioral task
behavioral1
Sample
4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1cN.exe
Resource
win10v2004-20240802-en
General
-
Target
4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1cN
-
Size
1.7MB
-
MD5
7e481a225aadd21ff9a3b8ba0b3ea5b0
-
SHA1
c40f580398ed3d6b8e7230e9ba6cf97bb8a63b2d
-
SHA256
4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1c
-
SHA512
8e03d0a21da3b737771a98a5f15267182ef355c4643e263f90b06da7a0339bac8c52630e09dd41f20039ed8ce7e4dec13a03642562512a6942c8f1c9596369cd
-
SSDEEP
24576:wyhYQ2y2NygyhYQbcTxI7Hh9ZBXf8w/r6:w8Yipg8YLO7HhpVu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1cN
Files
-
4effd5303ac2242b31ea570beab31c5ef5678f8b81f0fc6e568a8feab0a84e1cN.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 565KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
QUIT_TEX Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MAIN_TEX Size: 512B - Virtual size: 389B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT_TEX Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ERROR_TE Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DDEQT_TE Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DISPATCH Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
GRINIT_T Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ