Static task
static1
Behavioral task
behavioral1
Sample
47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f.exe
Resource
win10v2004-20231215-en
General
-
Target
47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f
-
Size
8.9MB
-
MD5
b727c4b8da1ee4dd1c17c26aa02d92ac
-
SHA1
ac3e53f12a05b784cf5d5f8e12701622fcac0c7f
-
SHA256
47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f
-
SHA512
5bf52a66fdcf7bb59de92485d493c06bea77db945c674047d853da0ad3a2ae36ce772c0fa60414fabf21f16d3a9254bac01ae9d0d05d6c6d161ebf98ce14b2c4
-
SSDEEP
196608:Oebi/FQ9pwv8A7fmb0cW8X4fx04lZDcteXIncqGZjZjW:O+i/o5A7eMjlZDctBncrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f
Files
-
47c05af7feb0ac5ec3b4cdc955a5dc276c31fa1d06dbeb4dd88b7b484fa9a53f.exe windows:4 windows x86 arch:x86
41c6f77098aa7e7d26bf710c7558d271
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyW
comctl32
_TrackMouseEvent
dbghelp
MiniDumpWriteDump
gdi32
GetBkColor
imm32
ImmReleaseContext
msimg32
TransparentBlt
netapi32
NetApiBufferFree
ole32
OleTranslateAccelerator
oleacc
LresultFromObject
oleaut32
LoadTypeLi
psapi
EnumDeviceDrivers
setupapi
SetupDiGetDeviceInfoListDetailW
shell32
SHAppBarMessage
shlwapi
PathFindFileNameW
user32
EndPaint
uxtheme
GetThemeSysColor
version
GetFileVersionInfoW
wininet
InternetGetConnectedState
winmm
timeBeginPeriod
winspool.drv
OpenPrinterW
Sections
.text Size: 8.8MB - Virtual size: 40.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE