Static task
static1
Behavioral task
behavioral1
Sample
504a73f4519e81ec643e5378696bc6b7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
504a73f4519e81ec643e5378696bc6b7.exe
Resource
win10v2004-20231215-en
General
-
Target
504a73f4519e81ec643e5378696bc6b7
-
Size
1024KB
-
MD5
504a73f4519e81ec643e5378696bc6b7
-
SHA1
41f2ece1790923fd0a964dc3b44c653579d262a3
-
SHA256
6de0fb8918f2a9c6bcaf781ebedf2711d8dbd89d1c96719ddf8f123e077d254d
-
SHA512
c9912d14297d046a26a3b5315d78752ae982c39f5513164fee29f742efa697b58a0e0754956a896e9781f71c7852997603b9edd78ab30ef585fdcb62bcad77f2
-
SSDEEP
12288:ZL1hX59zD09tdO8VtMlw4PJS/RSzLxs1FO9IKNjSeg9t6Zf+oaWQfZf7UV6mMxX6:51natdO87Aw4PUSZN9AtwmCmUV6Mau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504a73f4519e81ec643e5378696bc6b7
Files
-
504a73f4519e81ec643e5378696bc6b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 323B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE