Static task
static1
Behavioral task
behavioral1
Sample
04c759f302e42ecaa6353542effa011b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04c759f302e42ecaa6353542effa011b.exe
Resource
win10v2004-20231215-en
General
-
Target
04c759f302e42ecaa6353542effa011b
-
Size
371KB
-
MD5
04c759f302e42ecaa6353542effa011b
-
SHA1
45f1b3d94632bf9508d5e2202257ad85f98d6132
-
SHA256
04d94bd3439675e267b511332c0bc476c37c18aefa430bae7473adb0f0f5a2ee
-
SHA512
d6870965cb20f6e3d2d3bb32b1914058089573ffde32ef1f198156c83bd7e51a9a88ac5a79d9c6665f1324f7369dcc635f950ad247b20e272d686ea8df8a5909
-
SSDEEP
6144:4JoxJokga1aKZKFmOuL+wFNXnoWTsAHvvNc18nZtbcP5GwKEES:4WxCkga1/ZKFoL+w7XNW8Zt4DtES
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c759f302e42ecaa6353542effa011b
Files
-
04c759f302e42ecaa6353542effa011b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ս�� Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hack120 Size: - Virtual size: 83B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mao Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE