Static task
static1
Behavioral task
behavioral1
Sample
154c497065785d05b06452cfc40bc5fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
154c497065785d05b06452cfc40bc5fe.exe
Resource
win10v2004-20231222-en
General
-
Target
154c497065785d05b06452cfc40bc5fe
-
Size
126KB
-
MD5
154c497065785d05b06452cfc40bc5fe
-
SHA1
c4e180ca629e1fdde4486af20f4cb0fda7aff0a0
-
SHA256
7e4683534a9ec5842951ed3a66f1a4a5854b7c24ec79eda4e42cca3f80501698
-
SHA512
41872e62880652317403b02a4efea135b4101283d58c75ee757ee077bcd5778c3e623b0a6d0e3644c40c7ae0184bcbbcae157ba7c0619595cae935d57890d2d5
-
SSDEEP
1536:v9HGxZfhKseH04lzqG48Oy/qh73fnewsVGFdKhRNJ7orE2g6Q2THvF9WRbdfbnXF:vtGfJKsqGPy/i32/GfKhRXXePeHfb1Mq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154c497065785d05b06452cfc40bc5fe
Files
-
154c497065785d05b06452cfc40bc5fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dzma Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
275 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y2xtexyw Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE