Static task
static1
Behavioral task
behavioral1
Sample
15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1.exe
Resource
win10v2004-20230915-en
General
-
Target
15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1
-
Size
4.2MB
-
MD5
30a5c61286a1511d292bcfd4a645b3d7
-
SHA1
8907076aae08249c24e7940a7b9ec8e6ae23a313
-
SHA256
15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1
-
SHA512
5d3b52beea68e52af46646c0eaa7e564de2024eb571effd1824ebd57a6972562ab9e2ac4160710087112cb0a53875d0afc752d53f0f022c7cf7adb1529e22bb0
-
SSDEEP
98304:A4SKk9U9XXe8NvvodSGlKigJ0Ottb3dYr:K9U9nNNMSG0BRtNq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1
Files
-
15540a76cea34f065e708c4a9d8108a64dc2683238f41f154fb940ca831a32f1.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Av97VVdx Size: 4KB - Virtual size: 1.8MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ