Static task
static1
Behavioral task
behavioral1
Sample
04b8b1eef1ffa617fe7a1f7202f47d2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04b8b1eef1ffa617fe7a1f7202f47d2d.exe
Resource
win10v2004-20231215-en
General
-
Target
04b8b1eef1ffa617fe7a1f7202f47d2d
-
Size
155KB
-
MD5
04b8b1eef1ffa617fe7a1f7202f47d2d
-
SHA1
01e6392c0cf0da2b88faae61c8e88be2f4c4cdaf
-
SHA256
b2e9310d975884f1be56102468fd517685ed859192a3b4603d9a9a86ebd3e432
-
SHA512
a06a4346723380f3456556a1ef879541eb148a43444a1a2dd210fb257b61a20fe46d2474075b2fe497636c435b4444bf7e1f34ebc4994debee0af2fbfa499bdd
-
SSDEEP
3072:BUEVBuY+C9c1YCjES3/ApCx84Q6i0kV/NyPLLqrkA6o8:B7uZC9c1hjES3494jkV/NgrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b8b1eef1ffa617fe7a1f7202f47d2d
Files
-
04b8b1eef1ffa617fe7a1f7202f47d2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 102KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AZPR0001 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE