Static task
static1
Behavioral task
behavioral1
Sample
b47b95d0ddb7982b91c9575d75cfcc96.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b47b95d0ddb7982b91c9575d75cfcc96.exe
Resource
win10v2004-20240226-en
General
-
Target
b47b95d0ddb7982b91c9575d75cfcc96
-
Size
385KB
-
MD5
b47b95d0ddb7982b91c9575d75cfcc96
-
SHA1
313c2f1de96699fc19e3fd577457d0f41ed2c961
-
SHA256
b69b37fb55801cdc45852930247110093b300a73c0a471ff418a9f2646c2f58f
-
SHA512
6bdb361dcf682f8954cbc2897262b3591fb8596b6cc38354e2961c937a0a10bb1352a9b4b4036898a994eecc75db6625912e8bf1a75a4e5347c14e921008eda2
-
SSDEEP
6144:73lSwT8o7WTVfb8yhMbQz4grwMy7yU+m+2yqdKsH3/b8X/Pc86PpTTVC/FUzOVly:7VSVfRPsz7yU+End/j8XM3ZTEEJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47b95d0ddb7982b91c9575d75cfcc96
Files
-
b47b95d0ddb7982b91c9575d75cfcc96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ