Static task
static1
Behavioral task
behavioral1
Sample
04c3737bd88048763b9ea6f24a7d3d2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04c3737bd88048763b9ea6f24a7d3d2a.exe
Resource
win10v2004-20231215-en
General
-
Target
04c3737bd88048763b9ea6f24a7d3d2a
-
Size
279KB
-
MD5
04c3737bd88048763b9ea6f24a7d3d2a
-
SHA1
3fc19d3b86e076458ac3dbbc02269392ae7d555b
-
SHA256
e65bc8227d4c1c96f8b1c223e00d47f1fe67cd0f65567c217304655166c082bb
-
SHA512
862b464bf94fae98c7bb161085450e28ae850716f64568ca8beb01ec44ccadde7f103444de675a960d49e4733aff18409eb36f2fbf9a69a33269bf763fa4ff5f
-
SSDEEP
6144:w9TzAKWjt4Vhc7NTshDnPKsIKmmCTyMcq9lowOJ5eDqY89axDYZ+MIFMIiUU:w9YV9shjPrIVWMcq9GwOeLxcZ+JMRUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c3737bd88048763b9ea6f24a7d3d2a
Files
-
04c3737bd88048763b9ea6f24a7d3d2a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
TEAM AiR Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TEAM AiR Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE