Static task
static1
Behavioral task
behavioral1
Sample
15dd205f125a17ddc29c65e81a2f667d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15dd205f125a17ddc29c65e81a2f667d.exe
Resource
win10v2004-20231215-en
General
-
Target
15dd205f125a17ddc29c65e81a2f667d
-
Size
225KB
-
MD5
15dd205f125a17ddc29c65e81a2f667d
-
SHA1
12476f8703f989e62018c371373e5c4039767bfd
-
SHA256
e329839e331470138383753f30fb6bae48e7688d45c3db583fdf80a68dbc92b7
-
SHA512
c0890989c7ff4c40f0320e22599317e513f3a0e0285df601a61de1778cf6652d7ebe80eb1c976a28f8bf3e66da08c2183531c97c6267ca02217b40d29d825394
-
SSDEEP
6144:d8KneNc5QyMXkm9tRSJZb5OhX6CrdfONr:qX7vH1SLbUd6cM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15dd205f125a17ddc29c65e81a2f667d
Files
-
15dd205f125a17ddc29c65e81a2f667d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 766B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r1loc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ