Static task
static1
Behavioral task
behavioral1
Sample
b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522.exe
Resource
win10v2004-20241007-en
General
-
Target
b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522
-
Size
504KB
-
MD5
4f39f90c206c7880d687ce6001266733
-
SHA1
0641708613648c5573b38a35aab8f75245d50da5
-
SHA256
b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522
-
SHA512
6fba3df2ede62c468d0efa461fa6ab265df79e3042304431863cb1696a5006ca828bf63459e5e7c6da7c47c3cf9da9a44f5db2ae0fb0373a4b71d22555d165a3
-
SSDEEP
12288:/4iUWaLnhIvOSG57XN53Z/ZKgCSAAfHe4tM9oZZzwPAL2+TcE:wiU5tIv2jN5lZKgCJY+4ZwPB+T/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522
Files
-
b04c112e71750d6fc0937ce7ac96776b2b1ce90b5eb9815195da69aac5c90522.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 488KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE