Static task
static1
Behavioral task
behavioral1
Sample
504fcf2f31bcd82b258ac17f3109dd39.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
504fcf2f31bcd82b258ac17f3109dd39.exe
Resource
win10v2004-20231222-en
General
-
Target
504fcf2f31bcd82b258ac17f3109dd39
-
Size
26KB
-
MD5
504fcf2f31bcd82b258ac17f3109dd39
-
SHA1
683d2b06bd602d18d6d77663124f51ed7a3abbdd
-
SHA256
6d46614219e952d43fba8fb5cd82f2d9e2eeeab2137de9efcc85d97fbccc353a
-
SHA512
f88fb5979392215af58eb19f8567ca4fe27ebfb07c75c30bbad85b28d1720663348fcf3b7e6c6b077a4a04e240ec1f0ea8fbad906c8f488d81bce4aec0043553
-
SSDEEP
384:c/6SOiwE3qrPgipIpT0NVLgnaTawFGuunFS2qQl9XqJAZrTEX5H8sDS18:Sp73b0gnQaCInFSWfXprTEX5LDS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504fcf2f31bcd82b258ac17f3109dd39
Files
-
504fcf2f31bcd82b258ac17f3109dd39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��7�� �� Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8yq�cp Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE