Static task
static1
Behavioral task
behavioral1
Sample
04e0d1e694a7c4c676d1d6bd8acc1c22.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04e0d1e694a7c4c676d1d6bd8acc1c22.exe
Resource
win10v2004-20231215-en
General
-
Target
04e0d1e694a7c4c676d1d6bd8acc1c22
-
Size
163KB
-
MD5
04e0d1e694a7c4c676d1d6bd8acc1c22
-
SHA1
147ac70a9eba5e9bff87f8002d66bf633a5ec60e
-
SHA256
4a0584e03f94ffb00d9317e8bddfe1745f19622eb37d7bd376e886b79f50067b
-
SHA512
21baf4867d33b455d3e0bc5894e09a01925cfb6e782a082e8e46b18b946784d939046ea9bcc52a59bd01ff78bf5ad79fa6051cfb623b7cd5c8e8521e24f9189f
-
SSDEEP
3072:zRsFiVxoXjWE71sA4eraImPl9f+fdjYgjrqYRDxPzrc77OWw8x8c2z:z5cXqSiqaIeldwYgHVD9c769/c2z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e0d1e694a7c4c676d1d6bd8acc1c22
Files
-
04e0d1e694a7c4c676d1d6bd8acc1c22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 58KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE