Static task
static1
Behavioral task
behavioral1
Sample
504e3f515c7e6d17dfff199bcd181a5f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
504e3f515c7e6d17dfff199bcd181a5f.exe
Resource
win10v2004-20231222-en
General
-
Target
504e3f515c7e6d17dfff199bcd181a5f
-
Size
141KB
-
MD5
504e3f515c7e6d17dfff199bcd181a5f
-
SHA1
839bc3fafacee7597e19cdfeb77aa24969f3d657
-
SHA256
34a734ab6514fdfa40dfeac6d164e2d4877a8bf105d2d2ef89d82e08bc6c0bd5
-
SHA512
9737e90c8c8274fa9930c46883d5a0b26eb91523792081e3be36d22eedfac296f540ff77e4f7359460a49369547fc9a42fcd40e63de086d3fc5da2d8f91c431e
-
SSDEEP
3072:0OLMNTBxrMjEEr00hdZvUYkKqJsexD8SeoJnxaFool:0aGTBajEEr00Z3bTSbaFxl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504e3f515c7e6d17dfff199bcd181a5f
Files
-
504e3f515c7e6d17dfff199bcd181a5f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
3lwk0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3lwk1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3lwk2 Size: 130B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE