Static task
static1
Behavioral task
behavioral1
Sample
57d15a6f866ced075bc300b1e2c37165.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
57d15a6f866ced075bc300b1e2c37165.exe
Resource
win10v2004-20230220-en
General
-
Target
57d15a6f866ced075bc300b1e2c37165.exe
-
Size
255KB
-
MD5
57d15a6f866ced075bc300b1e2c37165
-
SHA1
145479399c23aabcf01caaa3c9f6356746288e25
-
SHA256
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755
-
SHA512
28d45792e0f5cf819fc2a362167c2f1ab83cf5256a857f38d904d5ec26095b5c7718d2c8b913296aa809a03ee2a7b43d5e372defb2c9bf67feb3e97a0794e0a9
-
SSDEEP
1536:VuSmgtPAEzzeUkTVs8QbNFsCqThVaNj0XbK4ka87:VuS9AEzzeUkhs9FshThp07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57d15a6f866ced075bc300b1e2c37165.exe
Files
-
57d15a6f866ced075bc300b1e2c37165.exe.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ