Static task
static1
Behavioral task
behavioral1
Sample
b015575eb5abad26b0035d51de64cf68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b015575eb5abad26b0035d51de64cf68.exe
Resource
win10v2004-20231215-en
General
-
Target
b015575eb5abad26b0035d51de64cf68
-
Size
3.3MB
-
MD5
b015575eb5abad26b0035d51de64cf68
-
SHA1
dbeeb4adc3bae97607cc9713f556ec11804bcfe8
-
SHA256
162fb91e37434139e526eae4e15d7c8060e8f1f1751fe7bba23a28848f01e9cc
-
SHA512
8da16fc68cd4d1f359fc981ed18e5c37679aafaec881ed21b65e081167215f99c206404cd439d5aa8e8096ce6073d98e380201590ee2cbd852ec0fb631794d97
-
SSDEEP
49152:FvJW55HUOuywTCcFR8SU+/WfAZggSO7jPtlCmkm42YUPN/Tj5KjiyME4MGUlfhWR:Fv40NyaRa+eQ9fPejmUUFGwMGUl58Ff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b015575eb5abad26b0035d51de64cf68
Files
-
b015575eb5abad26b0035d51de64cf68.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ