Static task
static1
Behavioral task
behavioral1
Sample
504ad0afa9c484bd6ed00c44a9c92eb9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
504ad0afa9c484bd6ed00c44a9c92eb9.exe
Resource
win10v2004-20231215-en
General
-
Target
504ad0afa9c484bd6ed00c44a9c92eb9
-
Size
1.2MB
-
MD5
504ad0afa9c484bd6ed00c44a9c92eb9
-
SHA1
7312f383523f4f14332c0a2eda2e3d6d5923e2df
-
SHA256
8edcd43ff3b1a61c4ba628a21e69c2163f872a3337bf1a8fbd72609dff49945f
-
SHA512
83b834d51dd191a2f8be09959520fed2f04d4ac39c8d7f6b31494bf7cd16d1b9bc6246af8526351d972cf76237eadcc51d2941f28173f2cf5ccafd3d47072740
-
SSDEEP
24576:T2RIC9GbFBkk1kKlx3noyw26IlaDvB9QXlUHideJX:T2Rz9G40lx3eTIlazfklYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504ad0afa9c484bd6ed00c44a9c92eb9
Files
-
504ad0afa9c484bd6ed00c44a9c92eb9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 211KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE