Static task
static1
Behavioral task
behavioral1
Sample
47099cce5a652c157109976fd9a84db7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47099cce5a652c157109976fd9a84db7.exe
Resource
win10v2004-20231215-en
General
-
Target
47099cce5a652c157109976fd9a84db7
-
Size
7KB
-
MD5
47099cce5a652c157109976fd9a84db7
-
SHA1
6359eb9669811194d711bc4d668432e22f98ce53
-
SHA256
7674473c37668fa66e8fdcfb120d9599b11566252ed0d47f00c9148df4d88f46
-
SHA512
128cb80ffeb1aeda0900691229545a8c16c83fb2220ca9a76e4de403e993dbcb42391416b105c053d8f24d9ecdd55d7612ff29abffebad4d82d6bcd094e76fa7
-
SSDEEP
96:HkZkkkkkkP8kDJYlsKpeUc4/DlnlZYV0HK3jXsR34JL8Y9GedZXdWlhW4brgwu:Hk56ln+oZgf3jXsSV9GedXWlh1Pg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47099cce5a652c157109976fd9a84db7
Files
-
47099cce5a652c157109976fd9a84db7.exe windows:4 windows x86 arch:x86
573a8e3002c3a49e385a632af519e901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE