Static task
static1
Behavioral task
behavioral1
Sample
46c27db63cf18084ba93abe0b6bbb82b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46c27db63cf18084ba93abe0b6bbb82b.exe
Resource
win10v2004-20231222-en
General
-
Target
46c27db63cf18084ba93abe0b6bbb82b
-
Size
222KB
-
MD5
46c27db63cf18084ba93abe0b6bbb82b
-
SHA1
d76c7c01288d5e40d4b8b9f5cc414f47156d930e
-
SHA256
941f57adef5a5175bfc010bc60e184afaf55566a18d2bfd1d30231f308415764
-
SHA512
cdc2681ea9fd5c0107634663513232c6f9562e4dbe502029900ecb98b67fddebae360061131c3c171b8fd325b9f96a6e3291fee076c876380db87d8a80b8b67c
-
SSDEEP
3072:xw9WukIX6O45pix0dFVJ21AITX08osmqHQQ2nkGTRP2Et2ext9O/vUW1nNF6j2O8:xWCZOA0x0dUSITyKQ5kYttYvUWdfNOaX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c27db63cf18084ba93abe0b6bbb82b
Files
-
46c27db63cf18084ba93abe0b6bbb82b.exe windows:4 windows x86 arch:x86
148bf55ceb3e5471ef5f9ffc2bb75e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.XComp0 Size: 212KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XComp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE