Static task
static1
Behavioral task
behavioral1
Sample
0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0.exe
Resource
win10v2004-20240226-en
General
-
Target
0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0
-
Size
7.6MB
-
MD5
471b3df96d61d4ab2142c1e1234de84b
-
SHA1
d661f50acf7d8d3f7491b59e6618eb23f9cb0ad6
-
SHA256
0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0
-
SHA512
1027245b3f567619eb58ca7359d985d409704b04e2dfe3c14a304c24c6a9cdc0dcd2c19aa17112da9a988c47ccf1704c4c8903a2cfa181e22a25e4d30dff32d1
-
SSDEEP
196608:7xKQrJfpZ8/5MGg9CmUK/ikFHoFubMXZKRVfLDWDI:7xxf2aGUlKmoFWMpKDfHWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0
Files
-
0fc04921c78e9a489cd615f6782e0398fc523db82e85534a3d55efb8d91294b0.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 828KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 99KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 208KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 72KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.���� Size: - Virtual size: 10.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ