Static task
static1
Behavioral task
behavioral1
Sample
48ac0a3d3281222145a932f714c3a3c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48ac0a3d3281222145a932f714c3a3c4.exe
Resource
win10v2004-20231215-en
General
-
Target
48ac0a3d3281222145a932f714c3a3c4
-
Size
76KB
-
MD5
48ac0a3d3281222145a932f714c3a3c4
-
SHA1
aef0dc2cfa23e42c81d29ec4f8fea33c0ee90789
-
SHA256
5c82d46734466bbb2a021ba4c01ba25539fc88183db23d607bb880789342aa1a
-
SHA512
a7f75a60e726a065fb8064842d255a97326267943769649d02241e8c52e96849985283eba21a11c979d184f7e8e1b436f9ceccf8dcd4c64dcefc886ea84504b0
-
SSDEEP
1536:/9GQD0ux0a8Hq37+eIrKg93kAD3jnRwMBDVgo7iHqPjpjVrs2ryrd1vUQuq6:/9PhYqr7YvSADjn358qPjHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ac0a3d3281222145a932f714c3a3c4
Files
-
48ac0a3d3281222145a932f714c3a3c4.exe windows:4 windows x86 arch:x86
6cda7fa635287a490f910b7f979ef6b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetThreadTimes
HeapSize
RemoveVectoredExceptionHandler
SetConsoleHardwareState
GetSystemRegistryQuota
GetCPFileNameFromRegistry
BaseInitAppcompatCacheSupport
GetCurrentActCtx
ScrollConsoleScreenBufferA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE