Static task
static1
Behavioral task
behavioral1
Sample
04c9fe47d5e526d60a050a6d5cca388d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04c9fe47d5e526d60a050a6d5cca388d.exe
Resource
win10v2004-20231215-en
General
-
Target
04c9fe47d5e526d60a050a6d5cca388d
-
Size
5.6MB
-
MD5
04c9fe47d5e526d60a050a6d5cca388d
-
SHA1
68b4103a342a13cc91a51dc47da06e39468a54c0
-
SHA256
903627206401db27b8e731c3ac20a290e2cff66a96d022a91b8c72286918cdc0
-
SHA512
e49560e16fbd37df913b92a39da4137c8951f744324557c4241df4dd1cf72092b45c75b730d0beb7d780c1b2b9ba64c8044ecdcf274f520dba6d3528488644b4
-
SSDEEP
98304:HcuNxzhIkvvLb+w590WqxzUSDD3XDn+0d+ySOeFSQDaqyucVH1DtWlC8CK/GEzyH:8uNxzhIkvvLb+w590WqxzUSDD3XD5dgu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c9fe47d5e526d60a050a6d5cca388d
Files
-
04c9fe47d5e526d60a050a6d5cca388d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.6MB - Virtual size: 142.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE