Static task
static1
Behavioral task
behavioral1
Sample
472e240e62dae2e1cd61c248d3f584805274f53b1e69df69306626477c123907.exe
Resource
win7-20240221-en
General
-
Target
472e240e62dae2e1cd61c248d3f584805274f53b1e69df69306626477c123907
-
Size
287KB
-
MD5
11eb1b8c9b82ee7f9fc4541dbde666f8
-
SHA1
cc751925be87c81b59ccfc7dab96bb2d08f76de8
-
SHA256
472e240e62dae2e1cd61c248d3f584805274f53b1e69df69306626477c123907
-
SHA512
77cb421c7f3f93586808b9f6a35817836c24a6bc175bcdcbd10b25edbcecb8878ac19e05bfe8b5a8791898f88dfa994fc556434a1ffdbcb2c5e9086813e20f1e
-
SSDEEP
6144:96xwSR5NtUIJEWyXuew+q1l0d2Js6H5/TZkK1:9A3NtUISdPw+Elq2Jsm2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 472e240e62dae2e1cd61c248d3f584805274f53b1e69df69306626477c123907
Files
-
472e240e62dae2e1cd61c248d3f584805274f53b1e69df69306626477c123907.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE