Static task
static1
Behavioral task
behavioral1
Sample
477d8f9e825974a8ebd6a17c157472fd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
477d8f9e825974a8ebd6a17c157472fd.exe
Resource
win10v2004-20231222-en
General
-
Target
477d8f9e825974a8ebd6a17c157472fd
-
Size
132KB
-
MD5
477d8f9e825974a8ebd6a17c157472fd
-
SHA1
2c8fc8bcadaf4dff81888685e944d7549840b17a
-
SHA256
c32d5f5969585a1e58347037a50ed5380613a301964734ff7d4d19bfa8710667
-
SHA512
cdb5fa72fe3c0ed79a2690a5ae47c168820a0c289d629f95fa2d70355ff40e0e9051562cf3421848f2f6fec736312ca791f7ff3a83a52cb8d18d822104dc7387
-
SSDEEP
1536:V/NSDEgPZfxutfS7cIowRvQLgzFr3DJkb9Uz/60m1OEgTzoigL0PLGCkooLCMHDm:V/EDjxuOcnwT3GbonEkoHgPLeLCM3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 477d8f9e825974a8ebd6a17c157472fd
Files
-
477d8f9e825974a8ebd6a17c157472fd.exe windows:4 windows x86 arch:x86
2f8a256cc6de23cdb1599db49b16b3d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
CreateHardLinkA
ConnectNamedPipe
EnumDateFormatsA
InterlockedExchangeAdd
SetInformationJobObject
NlsGetCacheUpdateCount
SetHandleCount
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
PESEC0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PESEC1 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ