Static task
static1
Behavioral task
behavioral1
Sample
04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20.exe
Resource
win10v2004-20231215-en
General
-
Target
04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20
-
Size
201KB
-
MD5
b202092714937714295f384e97aee903
-
SHA1
32e9ffce6efdf07eb1e2f2572cc7b02332ede505
-
SHA256
04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20
-
SHA512
525f388f813d190fec68f068a9386875db73542eeba9101527ba33878475baa101df45a93d99e755b84cc892dc1e74327602c7db817062cb6ca3436ecbc50a79
-
SSDEEP
3072:fP5gvNVLIfHQja1RfmLQADwSKkhU+tLgT5lODbiC8r1PkT:X2vnSwjaOcADw9cUeCOf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20
Files
-
04b820e4e8177a9392ab69cdd2f766e41d384fd3eb5e396d4e81654d8878fa20.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fsp Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmym520 Size: 29B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ