Static task
static1
Behavioral task
behavioral1
Sample
03879cbd29da0e202b0e2f8c8f76fbb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03879cbd29da0e202b0e2f8c8f76fbb6.exe
Resource
win10v2004-20231215-en
General
-
Target
03879cbd29da0e202b0e2f8c8f76fbb6
-
Size
2KB
-
MD5
03879cbd29da0e202b0e2f8c8f76fbb6
-
SHA1
a2655136b0d7b1dc3d3c5a9f5bf02f6ba7d42d05
-
SHA256
56c23b4739550dece3e4d50f6c3a170dcfe38d3ea506545f3a9a16428d837b47
-
SHA512
153b0abd85ac470f6be488014e8c9425bfe4502c7b887bcb08ad3a6d93ddb0d56069b36a3c71d220dab00faefecc892e7048b5ed6176b9f04377c6e761474a9e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03879cbd29da0e202b0e2f8c8f76fbb6
Files
-
03879cbd29da0e202b0e2f8c8f76fbb6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ