Static task
static1
Behavioral task
behavioral1
Sample
03fa3fd80877a12a9f47acdb985049c3.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03fa3fd80877a12a9f47acdb985049c3.exe
Resource
win10v2004-20240508-en
General
-
Target
03fa3fd80877a12a9f47acdb985049c3.bin
-
Size
1.9MB
-
MD5
03fa3fd80877a12a9f47acdb985049c3
-
SHA1
9976b8ba4f176659acce3df5381cf6862b6dfcaa
-
SHA256
c065cd286bd51339cf130bdc36f2bc03f47b0f484975526191027f8e55414155
-
SHA512
077c8b0b789989f6bd9e629f114856eeb6c77dcdbd0d6deeb681e65125156de230a154fe10c73f47e11ab9e709ef3c54556dadc423d442aa003302e7e067b110
-
SSDEEP
49152:NG1tKasDOa/hNKQ0Aa5ZX+1CtXgaszszC:wHsDuQEX+14XDszCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03fa3fd80877a12a9f47acdb985049c3.bin
Files
-
03fa3fd80877a12a9f47acdb985049c3.bin.exe windows:0 windows x86 arch:x86
27abfd9cfda7519d5efb3f08a2a4f3ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
Sections
Size: 42KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jgsgtgjo Size: 955KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
apxwbvxk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE