Static task
static1
Behavioral task
behavioral1
Sample
04a4ed789f8a254681cc65fe7361660373cc8a37b66992979c916bf4f990c8b9.exe
Resource
win7-20240705-en
General
-
Target
04a4ed789f8a254681cc65fe7361660373cc8a37b66992979c916bf4f990c8b9
-
Size
1.1MB
-
MD5
195cd12e36a633619a91c8ef4232c9d7
-
SHA1
3415a46735182d0d9e599fe7f13ddf31855323e4
-
SHA256
04a4ed789f8a254681cc65fe7361660373cc8a37b66992979c916bf4f990c8b9
-
SHA512
ca0ff0c71d63845a22e2f7cb56dca632b33d61cdf2915032bf85503a3689389b9f29eb543ee8725657eecc8271c1bb285b7ff2b4cdc7e891fa92495bc2f6c3de
-
SSDEEP
24576:D8ONrU6NFF0HYplu/6JuHsMFm88IVfHdLyJZ1nCEEWu5Yj8G:QsNFIY3JOft8mfCbCb68
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a4ed789f8a254681cc65fe7361660373cc8a37b66992979c916bf4f990c8b9
Files
-
04a4ed789f8a254681cc65fe7361660373cc8a37b66992979c916bf4f990c8b9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE