Static task
static1
Behavioral task
behavioral1
Sample
015dfd68ad141257bc744230825c06d8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
015dfd68ad141257bc744230825c06d8.exe
Resource
win10v2004-20231222-en
General
-
Target
015dfd68ad141257bc744230825c06d8
-
Size
103KB
-
MD5
015dfd68ad141257bc744230825c06d8
-
SHA1
d2fc7ab1b0deb48ee2027d64e5f83298fb0ce8fa
-
SHA256
e82324df1c8745d79c5c23400cad26f0522ae396e5839d5c8fdb8b51d73e855d
-
SHA512
5829727bc7a6dba2c16c176dff868caa97f97bb3dde49a29934d028bc85e1633c6947ed5ddead86c1a3bbf3c00701e506722b97a58b385d108a686d9c5dba5c3
-
SSDEEP
1536:zAj9YVu3VRYRmFPGjmHOPDalaX8nuYRZvZCb0OQ8dpCRoNuXRJD:zKl3D9IwagNCby8iL7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015dfd68ad141257bc744230825c06d8
Files
-
015dfd68ad141257bc744230825c06d8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ