Static task
static1
Behavioral task
behavioral1
Sample
157e2d55c6e2acb95f9decf82165ef89.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
157e2d55c6e2acb95f9decf82165ef89.exe
Resource
win10v2004-20231222-en
General
-
Target
157e2d55c6e2acb95f9decf82165ef89
-
Size
771KB
-
MD5
157e2d55c6e2acb95f9decf82165ef89
-
SHA1
dafd1e447b89916811549dacd26d77a60cdfb226
-
SHA256
4a1b57f50b041bd0caf65e68aaf604d702e00aae1638474819904c872ca10c0d
-
SHA512
eae23191902e9e7532b312291746da1b6cdca8e114f7f7d21840d1c0476ee3da01a85f6f167b11f80319790fb62170bcdf86f781c780561e7f6d425c1fe18694
-
SSDEEP
12288:0uC31TrdSicZySTK3T/6ONKSr4WCb10VHmDXTuFaa2AtyGTKOF25ZoJJyhRge8B/:odSHZKtPCb10hJaothZ2/T6FBBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157e2d55c6e2acb95f9decf82165ef89
Files
-
157e2d55c6e2acb95f9decf82165ef89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ