Static task
static1
Behavioral task
behavioral1
Sample
04794bad136359cf950b5e99a63c2f7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04794bad136359cf950b5e99a63c2f7b.exe
Resource
win10v2004-20231222-en
General
-
Target
04794bad136359cf950b5e99a63c2f7b
-
Size
19KB
-
MD5
04794bad136359cf950b5e99a63c2f7b
-
SHA1
7bd6ed5937f08814b09cc6ddface934208387bbd
-
SHA256
3bb0499e74f97e36a4a0eb546e2c7ad58460e71c1814d4a5e589068457f63ddd
-
SHA512
b8b00d33b108d1bf42d5f61ccc000ad6066dfcf85fb1f8f082510b4c3dbf2ded56698177cac52a4df580c8ab6a87096acd0c67d5b489e935cd053c2dff1e18c1
-
SSDEEP
192:N8V86Esiq71WpX4WmebVXqdnIn05gD9C5hqBlw/xyUSmC6468eOtFlH+lzmhIONo:OG4TebV6dbuoh1kX681FN6BAs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04794bad136359cf950b5e99a63c2f7b
Files
-
04794bad136359cf950b5e99a63c2f7b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 2KB - Virtual size: 20KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE