Static task
static1
Behavioral task
behavioral1
Sample
150b562bf7d61c5e86d659b69972a151.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
150b562bf7d61c5e86d659b69972a151.exe
Resource
win10v2004-20231215-en
General
-
Target
150b562bf7d61c5e86d659b69972a151
-
Size
5.3MB
-
MD5
150b562bf7d61c5e86d659b69972a151
-
SHA1
9a3862940e78380ee5c3d04b4ed142ded29980c8
-
SHA256
3a3f54edc6ebbd84defdef527020de9f25cd2a088eb8d30405f43d1184905e4c
-
SHA512
41748a5bbc4fdbd9ecb0392ea3d8948cfabc2ae187297c04093ae9f452e253560ae45c4d747874f783983d3935d3af483784cbdfc47c402007e7223e3255f6f6
-
SSDEEP
98304:Td9qf9Ft/zGmeRBsSUQn9ZhsCMZsQWExb4ibBPiKS6H6wb:h9q1qH9ZOhqElpbSLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150b562bf7d61c5e86d659b69972a151
Files
-
150b562bf7d61c5e86d659b69972a151.exe windows:5 windows x86 arch:x86
928d2b874a7e45ccaf1fb2536270a43b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
WSAAsyncSelect
kernel32
HeapSize
user32
GetClipboardData
gdi32
PolyBezierTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayAccessData
comctl32
ord17
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
malloc
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ