CheckSigner
Static task
static1
Behavioral task
behavioral1
Sample
04f89521832691e6d9af78eaceb39727.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04f89521832691e6d9af78eaceb39727.exe
Resource
win10v2004-20231222-en
General
-
Target
04f89521832691e6d9af78eaceb39727
-
Size
369KB
-
MD5
04f89521832691e6d9af78eaceb39727
-
SHA1
a29085c6a8d37c9825243afd6f06b8f878e16fee
-
SHA256
169e0556f1bd3c3221e8dbfd5e9171098a1928fc15805894017cde081b1b176e
-
SHA512
9440b76eeb61a8325d786f1777e8b31dbac838dc21a4fcf540c15dd04f1eee34fbe136b71a64611ad47a70592725b8ec561d2ae19c27847d2917fa3c69f22b5e
-
SSDEEP
6144:30g8VrbTo6HZ5PInYAKrGOQlecIKEgdrMySVfBXxbwPhnl6FC2k+HFMY:3ezHZ5PSY3GOTcIgdrMySxLbwPhl2y+n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04f89521832691e6d9af78eaceb39727
Files
-
04f89521832691e6d9af78eaceb39727.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE