Static task
static1
Behavioral task
behavioral1
Sample
504bbe0fa119dff3d3d5dbb61e553c30N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
504bbe0fa119dff3d3d5dbb61e553c30N.exe
Resource
win10v2004-20240709-en
General
-
Target
504bbe0fa119dff3d3d5dbb61e553c30N.exe
-
Size
695KB
-
MD5
504bbe0fa119dff3d3d5dbb61e553c30
-
SHA1
e99481de9c23ef7bc632dc962053305cd3f27a54
-
SHA256
b9e07b053e1565f804bb4a81f3ab81857dc37addc8275a26d31176d18b1f8e5e
-
SHA512
304946ac0ada7008a5c912d2595c66f8c477d0a0db52ea614995ef692ecabf905c9b92f67066a262cffeb94a1940b6af9366a9159f73d1e5d7c7f81d14bbe5a7
-
SSDEEP
12288:A//vi9BuN4u2F7GMG2RPE1Hm5V7wUbsu+M8rAjBsUcIYeLJI6TsoqUvlD:2wu0kMG2pkmVbsKqKBFcIYeJndD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504bbe0fa119dff3d3d5dbb61e553c30N.exe
Files
-
504bbe0fa119dff3d3d5dbb61e553c30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE