Static task
static1
Behavioral task
behavioral1
Sample
04ff67b8f8b029ef085013f9b3b99c32.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04ff67b8f8b029ef085013f9b3b99c32.exe
Resource
win10v2004-20231215-en
General
-
Target
04ff67b8f8b029ef085013f9b3b99c32
-
Size
115KB
-
MD5
04ff67b8f8b029ef085013f9b3b99c32
-
SHA1
046c91d6bd6c0df6a199645c374660b98e29d3cf
-
SHA256
9a3fa14201d2ca204b12f5b5be649f1dbcbbb88036d47aec6880669c186df6e0
-
SHA512
e250346e52a75e29350cde01bf9989bafad358030be1339c691a7a1fc03e21ecbf29ac79a338f73bf13859b2eec07163b7591f2639f6e01b70acf0449699b42b
-
SSDEEP
3072:q5jDeBwS5U0nnVUZBptOzZH+rPcd5ifDAJsZHXVYutEYwbh0B:q5awS/nu/mZHn5VJsZ3GUEp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ff67b8f8b029ef085013f9b3b99c32
Files
-
04ff67b8f8b029ef085013f9b3b99c32.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
z8bxe Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyw7x Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ttw Size: 441B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE