Static task
static1
Behavioral task
behavioral1
Sample
04af951aca0da17d6ba976651cf13776.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04af951aca0da17d6ba976651cf13776.exe
Resource
win10v2004-20231215-en
General
-
Target
04af951aca0da17d6ba976651cf13776
-
Size
141KB
-
MD5
04af951aca0da17d6ba976651cf13776
-
SHA1
6a9401839aeaa544069b613e8d09357a3066a3df
-
SHA256
e7b8222e48dafe1596bdcabccf4c37fbba8829add009086a757e83cbb22adce6
-
SHA512
a402e43a104bdd1a16ac42ea564582787678f640470689431fd23fcae4c40e43fcfa9f77989f2820006ca84373a7375b9df0aff7f6f5fff12bb52407dfa64d94
-
SSDEEP
3072:3cdA5G2niO1P9HfgvSzI8Oi10A1ZSETsdREYRioA7OG1K/++:CuloY76A10E2/Ri/Ez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04af951aca0da17d6ba976651cf13776
Files
-
04af951aca0da17d6ba976651cf13776.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
new40 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new41 Size: 140KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE