Static task
static1
Behavioral task
behavioral1
Sample
5047436c4272a222ee4e892d1b19b6f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5047436c4272a222ee4e892d1b19b6f9.exe
Resource
win10v2004-20231215-en
General
-
Target
5047436c4272a222ee4e892d1b19b6f9
-
Size
980KB
-
MD5
5047436c4272a222ee4e892d1b19b6f9
-
SHA1
6185ec5c914394a011eb52506391e0a5443c537a
-
SHA256
e54a3ad8c121e39c46b1a1ece16435f09cc1e831fbf5454d604363e65075b418
-
SHA512
cf72c14500be67df9bb15423c25b38efa6623530d105fd5bb8ebf59e6fe664c35105b9005b87e5bb176d8e57a8d7b1805eaa2a34995f8b2367514ab268009524
-
SSDEEP
24576:QOIiawf+C7n1KO85l/sIV4bRSRBXwtzibndE:zaJ0K1ltQQZwR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5047436c4272a222ee4e892d1b19b6f9
Files
-
5047436c4272a222ee4e892d1b19b6f9.exe windows:4 windows x86 arch:x86
45096b1d1a27623ec1b288b8a77cd644
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
Sections
Size: 672KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 212KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE