Static task
static1
Behavioral task
behavioral1
Sample
04a05c5214840d49ce376f2d97c9d850.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04a05c5214840d49ce376f2d97c9d850.exe
Resource
win10v2004-20231222-en
General
-
Target
04a05c5214840d49ce376f2d97c9d850
-
Size
214KB
-
MD5
04a05c5214840d49ce376f2d97c9d850
-
SHA1
aaeb77fc2becc76e2848500665ddbbc3044587b4
-
SHA256
ba2d7e304746fea57cb24ea4053ae6320b9345cc84110ccbfe9888169c91e7e2
-
SHA512
20e094e881591c3f353c7a8ab593c94c0a4a4ee2ad66fe91fc9cd38bc36b48ba9097ddcc5dc3c7c1a773792275aca4069d8c27177b3357686393963a0b2d4168
-
SSDEEP
6144:t7FzGAawfoUt8E/lsGxqiT9k+tylZf0jcBhes4FFO6hDggnW:BFzlgUe8GhiK+w0kks4FFO6esW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a05c5214840d49ce376f2d97c9d850
Files
-
04a05c5214840d49ce376f2d97c9d850.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE