Static task
static1
Behavioral task
behavioral1
Sample
15fefa99a32344aeaba4f6da747ea563.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15fefa99a32344aeaba4f6da747ea563.exe
Resource
win10v2004-20231215-en
General
-
Target
15fefa99a32344aeaba4f6da747ea563
-
Size
673KB
-
MD5
15fefa99a32344aeaba4f6da747ea563
-
SHA1
9eb4971481ea7d56423bd5b0c7bb8fd5b6383058
-
SHA256
ca8026927cf0bf8e32586361c6041b82d018e0f9124dced4b692739bb4b3fbe8
-
SHA512
5403d2ab305f95703e64b4c6378df8e61b6ee42d45d243fd0524f2a27619652cb4f25fb9d07afd7f6a05fd5c5081177522996c4d376fd0fd9320ba7b3b786d9c
-
SSDEEP
12288:oZay7R3PtxGLxe0D2hC4rhPlMKLnQATbB56atKAbC7NyaWI9Vh:by7R3Pt+x7D8PHnzVVspNWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15fefa99a32344aeaba4f6da747ea563
Files
-
15fefa99a32344aeaba4f6da747ea563.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
zWwGAVlA Size: - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YVyCk0IU Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
duJhIB8Y Size: 659KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j72zVLog Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JQZ3xymT Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5Kv3J1XD Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TKdqN8pz Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ