Static task
static1
Behavioral task
behavioral1
Sample
04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785.exe
Resource
win10v2004-20240226-en
General
-
Target
04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785
-
Size
129KB
-
MD5
1a69d1ac0abf16881e7d6a6738540e93
-
SHA1
c2d72dfd460e35b2f80d23015ced74f54558fa1c
-
SHA256
04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785
-
SHA512
38865e84283b9af63ab4ea453807ce2b8dc9e84a355a282e8ac412e2284f1ea18adbae47b4f7d11d1069896974b24a6b8b069b2ce297d82c1870a95f1a4faf5c
-
SSDEEP
3072:5IMVZT5GqVXivkPtsCK8k9t3ywG3RY1W9V74:5IMVhEdcFsChk95yvhO+4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785
Files
-
04b6897e5ca57be09d4b0164fb6ec4945f595a480c631ff1ec7887bf348ea785.exe windows:4 windows x86 arch:x86
9eadb38f691a0b93dce1ca2ec6b7fa7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetTempPathA
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
GetACP
user32
LoadAcceleratorsA
RegisterClassA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ