Static task
static1
Behavioral task
behavioral1
Sample
473d7d3eec47c054e4cebc6613327ac3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
473d7d3eec47c054e4cebc6613327ac3.exe
Resource
win10v2004-20231215-en
General
-
Target
473d7d3eec47c054e4cebc6613327ac3
-
Size
61KB
-
MD5
473d7d3eec47c054e4cebc6613327ac3
-
SHA1
d86489622825e75ce709398975ea33ab7771a69e
-
SHA256
ca15a9b9156b4a93d74a8d8392ca1b457be382b6fab8c21934d9d9060218154f
-
SHA512
4977714d8eaa0811c6c5744395cf3eaa5f8c2f2b8f92e263f3d527c6e5eb18c8385034ddb2baf403a07dd350bb6d2c9459767ce2b9b14a683281df07ed7e356b
-
SSDEEP
1536:jLXW17TxbpmVwaunVzIoTbaQVKmpodLa67vdZJ:/XW1Z0Xu9Iuba4KmpeLa67TJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473d7d3eec47c054e4cebc6613327ac3
Files
-
473d7d3eec47c054e4cebc6613327ac3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ