Static task
static1
Behavioral task
behavioral1
Sample
47bb7504dda38cdc5cbacbeb91f3d993.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47bb7504dda38cdc5cbacbeb91f3d993.exe
Resource
win10v2004-20231215-en
General
-
Target
47bb7504dda38cdc5cbacbeb91f3d993
-
Size
109KB
-
MD5
47bb7504dda38cdc5cbacbeb91f3d993
-
SHA1
f990960ac37b4e850ccfb5d79cbd02739e121055
-
SHA256
c8258362aaaca60590017a3054d74a0b09c346c80d31dce3cd20e8419b316c9a
-
SHA512
d7ef78469c54fad872d10f16d02e048a8dd319bb9bd8c49a8e052af421ec65a5d4965da489357e9619dc6b74088ea3aa8ad3944e9e95983b15d2f7975e7e8d51
-
SSDEEP
1536:tmM19BcaXhONTfbG3WUsZr1e1leTy5gUsreYz2RdG1IH75A6QG9/qmRuSdesUaRA:AMF0967sHEcugU0eYzeNAZopRuEesUoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47bb7504dda38cdc5cbacbeb91f3d993
Files
-
47bb7504dda38cdc5cbacbeb91f3d993.exe windows:4 windows x86 arch:x86
39b772f9e6bfca3e20e0403416afb6aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
GetCurrentThread
GetModuleFileNameA
GetThreadLocale
IsBadReadPtr
LocalHandle
Sections
.text Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE