Static task
static1
Behavioral task
behavioral1
Sample
c04c9ed806b03db418e14fbd7199dc87.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c04c9ed806b03db418e14fbd7199dc87.exe
Resource
win10v2004-20240226-en
General
-
Target
c04c9ed806b03db418e14fbd7199dc87
-
Size
476KB
-
MD5
c04c9ed806b03db418e14fbd7199dc87
-
SHA1
54011a14299dba92d3fa46008f828fe169693468
-
SHA256
84580124a04900d05828e7351ec1987b1a5a7c828c5b93d6088c0bba37ccb8d1
-
SHA512
4c52760e410b3f2c9c41717a92e4e4111c46209940209bf2400a2c856f2325d4c409cbd5fa78e54d51c855ffe49e138f7a087de6f85e525ec714ebfd546d553a
-
SSDEEP
12288:q5bPM89otMZtXdHvsNlIOGhQQ39LLDKgCzrvKYMYd:qxPjiOFHv+HGhQg93aWY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04c9ed806b03db418e14fbd7199dc87
Files
-
c04c9ed806b03db418e14fbd7199dc87.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 348KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE