Static task
static1
Behavioral task
behavioral1
Sample
115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf.exe
Resource
win10v2004-20230915-en
General
-
Target
115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf
-
Size
1.9MB
-
MD5
a8f5eb01658683aaeb38737f1f68fe36
-
SHA1
e8e6beceead0c0ba83a4c2a241222ceaeecbb9bc
-
SHA256
115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf
-
SHA512
9b15fc4dc2ef2f789e688f30997d1d7c7f05ab83dae67ca5e704dc7e34866884fdda8c3862a4f46f07e62de58b427ac7db4f62a2fe42f42be2e32c150c4c0504
-
SSDEEP
24576:tBM5JRcSQkhMcww3s2ukKZq2eUd4zTxbpm9Q1Yhq81stKkQhV4X6kNuaDDFSVxLR:HW3FdwV2SY7R49Q981ssFhebNuaFixj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf
Files
-
115b45f3388a82dfc071e913ff0885286743fbdc98c52abcf811804e6c29cadf.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE