Static task
static1
Behavioral task
behavioral1
Sample
015b266dfadb2bf4ce1e7a71002e3679.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
015b266dfadb2bf4ce1e7a71002e3679.exe
Resource
win10v2004-20231215-en
General
-
Target
015b266dfadb2bf4ce1e7a71002e3679
-
Size
17KB
-
MD5
015b266dfadb2bf4ce1e7a71002e3679
-
SHA1
6501346ce34e84c761095ba246dd08c2850b88bd
-
SHA256
1e44f467a04cc79e2c114f3a3d6e7016bf48ab09f0d5ea624732f2908a58590b
-
SHA512
f2f5333b04efc0c7142b38320ab7fd79d44ff38d29d268a9ca9cd65191967fc2076dc918545725ca757bcea9d94d0065fb07bbf48042e61182710f3ae81ebabc
-
SSDEEP
384:adOr5rzhitHaAFuc/o0zmdiLL5UcqOw0iT1W0D0ujhrIUC:3tX7Iuc+diLLobhbh2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015b266dfadb2bf4ce1e7a71002e3679
Files
-
015b266dfadb2bf4ce1e7a71002e3679.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
.text Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ