Static task
static1
Behavioral task
behavioral1
Sample
155568d3f52cca7d05efbfc7d3244e2a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
155568d3f52cca7d05efbfc7d3244e2a.exe
Resource
win10v2004-20231215-en
General
-
Target
155568d3f52cca7d05efbfc7d3244e2a
-
Size
83KB
-
MD5
155568d3f52cca7d05efbfc7d3244e2a
-
SHA1
4758c1501a926719bccd788bc7a3e6e91a389469
-
SHA256
ddf80fa55d536dbaa9d8b0c7970bad98d99385b67d0f8b760dcd8dc6db055d78
-
SHA512
e1b6e7a22b87f8daf40e883ddeac8c54e5cb5fc3fb9126e52b92eac91e72dcc3b98b0f5d688bdc54ce4d0506a34dfed4af7deb9da6c93d9939bf541f3ebe58ee
-
SSDEEP
768:LewHIoJsavN7mUlwpOnP8NTPouPat0YOn7vt/OtW8KgE3Ur6FtfH6ALbBS/jFmh5:Lrt1l7mhps9ataW8K539tf1U4J6DJPkB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155568d3f52cca7d05efbfc7d3244e2a
Files
-
155568d3f52cca7d05efbfc7d3244e2a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ