Static task
static1
Behavioral task
behavioral1
Sample
804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f.exe
Resource
win10v2004-20240704-en
General
-
Target
804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f
-
Size
52KB
-
MD5
3e36be6852044922b3fa64d953724af7
-
SHA1
c73dc091ae3ece59e07e109cccb56593f1c51100
-
SHA256
804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f
-
SHA512
e9cd35c9b3df33d7a184ddcc5af87b1852e7975ba1ca70240133153640dfc08650627814b58b32215292c53d442567e58ffc82fada28604bd514e0c450b0a099
-
SSDEEP
1536:+WuAxUp9IbOhvS/KB7000000000000000s6ZOXLsMAdKZ:+bB93WZO7sMRZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f
Files
-
804f2f6f9462e2fd90cc88167823e0b1acb89514793dc3f3ce4ae83629bbaa3f.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ