Static task
static1
Behavioral task
behavioral1
Sample
04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d.exe
Resource
win10v2004-20230915-en
General
-
Target
04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d
-
Size
4.1MB
-
MD5
0363260b7166331596db0cf5ced9b1d7
-
SHA1
9ef6a643b91df52675930b2027921d2502175d16
-
SHA256
04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d
-
SHA512
9db1be1761aa41e6314c166fefabd332711ac7f408b432e5fe276b3e26428eac09e645e774fafa8a793ed6a6570c520234219b68027cabe92f155f7a1b83e843
-
SSDEEP
98304:Unr/QVwU+H50ooEX/oK4RQMk0tmMNG0FWuFjhylpYmFO:iTowBoEQK4WQmMNGMWubIiwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d
Files
-
04069b3d84afe2bf8ecd4d136ff4d3c77c5611a54bacec749da458bc3fcf9a8d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.5MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ