Static task
static1
Behavioral task
behavioral1
Sample
158ddeae9479db82f6bfda4e6763add4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
158ddeae9479db82f6bfda4e6763add4.exe
Resource
win10v2004-20231222-en
General
-
Target
158ddeae9479db82f6bfda4e6763add4
-
Size
37KB
-
MD5
158ddeae9479db82f6bfda4e6763add4
-
SHA1
b409bb925440d827592c1872b0f23034f4b7d2f8
-
SHA256
e67b824d3ed82e69e425cc55042b6baa3bb2aefe6b3218dfcfecd9b6b8b264b2
-
SHA512
df1420f80c1478a5ba6d52fc4e2a6d46fcc10ad9b80426ff05722d6aea9c2d9d6912bcc81e1d53adff87a03c6ee0066f70877587f959569acf491cac51ed1215
-
SSDEEP
768:2U2W6w/bFp+j+z5Pf7vsgHMsCBntS2bc4bnLb:2URbv+Kzl7vt2tln
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158ddeae9479db82f6bfda4e6763add4
Files
-
158ddeae9479db82f6bfda4e6763add4.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE