Static task
static1
Behavioral task
behavioral1
Sample
04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7.exe
Resource
win10v2004-20230915-en
General
-
Target
04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
-
Size
322KB
-
MD5
12afa304c20ed801a375149e783f410d
-
SHA1
4e739b724c8b0a5cbb521da8c9b00ae8613c5dba
-
SHA256
04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
-
SHA512
2fbdd9c4b27463aa24f8ad669edd939081e2ff0cc863934da11ef27ea3dcb4df512cb97d7db4e8bc18eb88ccc5ed25981612e842fdce9f77f2b3f15327d2cb4c
-
SSDEEP
6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
Files
-
04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ