Static task
static1
Behavioral task
behavioral1
Sample
2947e3f93c7d47e276be5d34ca4d83a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2947e3f93c7d47e276be5d34ca4d83a9.exe
Resource
win10v2004-20231215-en
General
-
Target
2947e3f93c7d47e276be5d34ca4d83a9
-
Size
249KB
-
MD5
2947e3f93c7d47e276be5d34ca4d83a9
-
SHA1
3c1a99f5e6f7d0e2b36a6d80d40eff89d0e2bb1f
-
SHA256
5c0f9e54ae0eb5269972433a2ac0e320f5cc717860dedfcd3abaffbc0da56df6
-
SHA512
04b1f9af83cbe3c1b03259b45d701e8abfaaa2911dff44b20e02ee3e20c14788cb55ea720f2187747e74ae722cd532d3eb4730bb03378a035faa621f6eca04b2
-
SSDEEP
6144:yDl0I9LSK4z3hjsM/wLadpyDgmtfdKwUTXNkj:yf9L6BvwUYdKwUTXE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2947e3f93c7d47e276be5d34ca4d83a9
Files
-
2947e3f93c7d47e276be5d34ca4d83a9.exe windows:4 windows x86 arch:x86
483f0009f2a5ef6f2ee27120d560fa01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
fputc
free
getenv
localeconv
malloc
memset
signal
sprintf
strlen
strncmp
wcslen
ws2_32
WSAStartup
accept
bind
closesocket
htons
listen
recv
send
socket
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 32KB - Virtual size: 32KB
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 168KB - Virtual size: 167KB
IMAGE_SCN_MEM_DISCARDABLE