Static task
static1
Behavioral task
behavioral1
Sample
ms15-051.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ms15-051.exe
Resource
win10v2004-20231020-en
General
-
Target
ms15-051.exe
-
Size
54KB
-
MD5
2cc80b81edb2133206d29ec44ed8aaa1
-
SHA1
e92f8a455d689137be8c05f3e2f3979fcc285725
-
SHA256
e2946ecb747a6671e7655aaa0c781e22c965284a10bbe983f59dca46128ce671
-
SHA512
bb69dde0bf3d02ff3862be18c2e777bfef08437f92045633ab8c788a94a76b41109f45271aa5d064e4ed108b7f2fa26076645daf2ec74daf679d5f7c6f7250eb
-
SSDEEP
1536:d8f4wh0Kg5XTBNwyzs/lHZQF1mRZw/q5xM72:+f4SyXTBNicQRy/qE72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ms15-051.exe
Files
-
ms15-051.exe.exe windows:5 windows x64 arch:x64
32256f269e466c28a2e212d10d20a9f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
RtlVirtualUnwind
RtlGetVersion
NtQuerySystemInformation
kernel32
DecodePointer
FreeLibrary
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
GetModuleHandleW
GetProcessHeap
CreateProcessA
GetSystemDirectoryA
GetProcAddress
IsWow64Process
GetModuleHandleA
LoadLibraryExA
VirtualProtect
GetCurrentProcessId
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
GetLastError
ExitProcess
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
EncodePointer
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapReAlloc
LoadLibraryW
WriteConsoleW
MultiByteToWideChar
user32
LoadIconW
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ