Static task
static1
Behavioral task
behavioral1
Sample
04d87052f5b243313038382a43bd4d13.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04d87052f5b243313038382a43bd4d13.exe
Resource
win10v2004-20231215-en
General
-
Target
04d87052f5b243313038382a43bd4d13
-
Size
112KB
-
MD5
04d87052f5b243313038382a43bd4d13
-
SHA1
d28d52e0fb1ef2657fa3a37a24d765613a08422b
-
SHA256
dd6548b0a73555b53b22dd8c65babc8e522ca884c6697503824bb19c292292c8
-
SHA512
b3a42891efe92081dbe6fa094ccd0cbbfd1177b846e02819516ecfa00263b25bebf6dade8de18ff63bb17b1a7b511b4fb10272d5c1c685ba9cb05ea84c002453
-
SSDEEP
3072:zLJMEPkoBI+x+lXu9wd3UouiMB+1RcAqlgyFSYExZgygn:iERBI+x+lXuMbMBcyJExZgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04d87052f5b243313038382a43bd4d13
Files
-
04d87052f5b243313038382a43bd4d13.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hs9bwl8 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
isbajn5 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdlzibwl Size: 532B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE