Static task
static1
Behavioral task
behavioral1
Sample
04a3afe3f26346595bab9302708c5ccc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04a3afe3f26346595bab9302708c5ccc.exe
Resource
win10v2004-20231215-en
General
-
Target
04a3afe3f26346595bab9302708c5ccc
-
Size
436KB
-
MD5
04a3afe3f26346595bab9302708c5ccc
-
SHA1
d66bd98fc3f4807166ccb91408758184ccca8896
-
SHA256
ae62ece7a106bc6d254ad6e3b4f73dad6a19fd301e539e81c2870cc860edff52
-
SHA512
303f5e1f91e1e08ee0ca8dcc3a9d8356680ff7533e5016b277b0c8e8fb468c3ecfe0b726bf9b9e828555d144655b402ef61936c70836fb7e33bed33da787e0c8
-
SSDEEP
12288:MEpR0kCyCxbzL2D1xj6LpXXOKUd3vQmFs:MsGkQbz4rjextUBQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a3afe3f26346595bab9302708c5ccc
Files
-
04a3afe3f26346595bab9302708c5ccc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ