Static task
static1
Behavioral task
behavioral1
Sample
a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29.exe
Resource
win10v2004-20240221-en
General
-
Target
a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29
-
Size
196KB
-
MD5
08bb7f926a8496d26910772cf8fb83cd
-
SHA1
71c7c1b241165f4ab32578fd60e2fbe45665204d
-
SHA256
a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29
-
SHA512
0f7850ab2ad611f720ca28746de6bc44a3ac57b0a9c8c7ce4467e4f0be1a31be1faa82b188c365b658880f79b7685ee982edf24867debd8f3580c136fc48c32d
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOE:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29
Files
-
a004e912ff0adf32ba4151821dfdc1eaa2d314c7d7fc8923a6686ed1ce4a5d29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE