Static task
static1
Behavioral task
behavioral1
Sample
01018d47af4a93dcc7697bf6331eeeb2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01018d47af4a93dcc7697bf6331eeeb2.exe
Resource
win10v2004-20231215-en
General
-
Target
01018d47af4a93dcc7697bf6331eeeb2
-
Size
76KB
-
MD5
01018d47af4a93dcc7697bf6331eeeb2
-
SHA1
1eceafb9c3b931df5f1499ad4cfa65e8b2b5a1b1
-
SHA256
46b932c758b7065d7cfb2dc23bbc5d3453b1374f3adb735bca5402b428119f00
-
SHA512
3330be2e281172bc5c7b1c14fca5fc9ecebd0c48a297a400f8c95d5fc319423c01bf14407a0e11ef61ce8daba9b1ad53726479f897ab2453b98be3b07ac85dd3
-
SSDEEP
1536:pAJ6pi98w/c/UtErBlMmWeq+sDFYzoQu/CxqAjEErxTWDTMqhGKYIZTET8x:pAJ6I98w/cctEcneq++FyoEjBkMqhGKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01018d47af4a93dcc7697bf6331eeeb2
Files
-
01018d47af4a93dcc7697bf6331eeeb2.exe windows:4 windows x86 arch:x86
9678fced67285c8fe5d301f505edd57b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetDevicePowerState
GetPrivateProfileSectionNamesA
FillConsoleOutputCharacterA
GetWindowsDirectoryW
FindFirstFileExA
ConvertThreadToFiber
GlobalFix
GetNumaAvailableMemory
DosPathToSessionPathW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE