Static task
static1
Behavioral task
behavioral1
Sample
804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cfN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cfN.exe
Resource
win10v2004-20240802-en
General
-
Target
804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cfN.exe
-
Size
433KB
-
MD5
e8df0308e9ac50a2754b1a6785cbffe0
-
SHA1
60d6180cd1b8e8be9e5b0a4fac99c65c86ce7059
-
SHA256
804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cf
-
SHA512
b658ed6b2eb6fec2900dc2b38aeb170c6746277a0c5df26442fc8533bb5fcb1c644a955eb6807ab7670c1f1fa5259be59e97cdd94dc221adb3dd8356ae881878
-
SSDEEP
6144:FcflsrkzGdX3AxM7zw08RnBN3dqmzwt4eFj6n5pwsoZTHkK:Fcdz6dnAxicdnPzzOjSpL8TH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cfN.exe
Files
-
804bf5706af204a21a3c0e0074a8470649fe0f7e684bbb4a94da1fe984efa6cfN.exe.exe windows:4 windows x86 arch:x86
560f66eeb453048abf6a7166b008c84e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SwitchToFiber
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ