Static task
static1
Behavioral task
behavioral1
Sample
47457aaa91c5405d949b98c01103d268.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47457aaa91c5405d949b98c01103d268.exe
Resource
win10v2004-20231215-en
General
-
Target
47457aaa91c5405d949b98c01103d268
-
Size
220KB
-
MD5
47457aaa91c5405d949b98c01103d268
-
SHA1
8dc55548b7c4e47716b76142c2d40a0667536d27
-
SHA256
40036879d0c35382a97b4c98e47292ea7da964d82245f82d7255ecd4ac479ffc
-
SHA512
e0ed9a613c7b16eff17bff3970d9b1307ad38c2111beea5d036f9a9d401fcea45978596bd4ec06a9d9eb4802c2dacac7ca6a02fdf4927822340226ec14ed194d
-
SSDEEP
3072:Gzz2Z+7ZK1OnZV0V6UPjbDkx9w3oTiUaFPmgRMNlPTGQQm6ytwZEsrYkK4v:GzzGwZqfDkx9pi98gWNlPTGQQm6agrd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47457aaa91c5405d949b98c01103d268
Files
-
47457aaa91c5405d949b98c01103d268.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 56KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE