Static task
static1
Behavioral task
behavioral1
Sample
159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9.exe
Resource
win10v2004-20230703-en
General
-
Target
159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9
-
Size
3.0MB
-
MD5
1d342ad7575778864e6ea5c93079a710
-
SHA1
10559ba0390b4054498d2121c5dc440f83ca5480
-
SHA256
159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9
-
SHA512
c9393914ff348c14df98e9f8b3c4dd1d4f70038e444684d96b6f25f8292363a7234b0e2d1641300c5f5f14a2fd4d07c10113574f6608eacd43879e99391d32c3
-
SSDEEP
49152:KqxmGrJgg+7b4IGhk5UV6diMUMsp/zuXuqHF2oSkJpuVwZ:1dgg+7cIGhxVEiMUH/zueqHFBSup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9
Files
-
159eb1a2d3ebde2a1b5a0714437085de933830980086e90955db52b8741186b9.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 636KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zirsrplg Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrlmevch Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE