Static task
static1
Behavioral task
behavioral1
Sample
468bf72a1061d6158fac8ec69f55d795f91b6ba6a5554befc4d9088121ffedf9.exe
Resource
win7-20231129-en
General
-
Target
468bf72a1061d6158fac8ec69f55d795f91b6ba6a5554befc4d9088121ffedf9
-
Size
97KB
-
MD5
4df846888498f6448922ff760f5f1ed6
-
SHA1
7d247d1a7236a529d2fb592b32b7cce78db1e13d
-
SHA256
468bf72a1061d6158fac8ec69f55d795f91b6ba6a5554befc4d9088121ffedf9
-
SHA512
db3468a209ae982881e6d49c442895e8aa2ec7c1df683719cd6f9935d10e3b4b4dc1ab38e62980401f2543db877286a3cca8dbf7f001fd7d6fa4f72e826391e9
-
SSDEEP
1536:5tFjGP/2PFArWORPLNX/AlF1X35yibpDsztRdSTvJg3rlqQD1QTndEXkQ:ljGX2PbOAP1n5yslsztrSTvJElvQzdA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 468bf72a1061d6158fac8ec69f55d795f91b6ba6a5554befc4d9088121ffedf9
Files
-
468bf72a1061d6158fac8ec69f55d795f91b6ba6a5554befc4d9088121ffedf9.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE