Static task
static1
Behavioral task
behavioral1
Sample
0604b423832940f6bca695934df871a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0604b423832940f6bca695934df871a9.exe
Resource
win10v2004-20231222-en
General
-
Target
0604b423832940f6bca695934df871a9
-
Size
90KB
-
MD5
0604b423832940f6bca695934df871a9
-
SHA1
cd9f29cf596f62488cef0bb0f1e0e2e0b78d738c
-
SHA256
e313dfa74f5ab0bbbf96a8a0888459cc3d1cb8c409cb59d6ab9a86d405ff70ad
-
SHA512
3a7b9fe4ee1cb095104c0186f2b51991708841baa43a2dd636d9cd19e6866a032d5db3b15717851efd6c4b8830de50500a7a3d9cae4b80bfb880eb9d303f69d4
-
SSDEEP
1536:/17kkDqOmRFhPnW81tZJsKdfnopql7Ni5WUJTK:/0OmRFhPnW81HqKdfnoMtNi5WUJ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0604b423832940f6bca695934df871a9
Files
-
0604b423832940f6bca695934df871a9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ