Static task
static1
Behavioral task
behavioral1
Sample
150c663cf7336e5fa9b782c79c14db0a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
150c663cf7336e5fa9b782c79c14db0a.exe
Resource
win10v2004-20231215-en
General
-
Target
150c663cf7336e5fa9b782c79c14db0a
-
Size
904KB
-
MD5
150c663cf7336e5fa9b782c79c14db0a
-
SHA1
a8e737424cd9de1c304efdfe84b1eba08ae1f01d
-
SHA256
d3e2e354d2e3e8e7bee133cc008651e1974354a9b130a3727474d243f9ec29c7
-
SHA512
211a26ac6d23e95aac6be279a3596a5f175b85f3bce23fd6bc31dea9bc3ac6ee4d9af491ea27e0f6ef1f5cd279c39fe926a41eb3ac15887aa76a10dfcc4a0ddd
-
SSDEEP
24576:AiAlmXAiT0k9TvgmTTK54OvsCQ07a7n88FN4FGRBUCjcB+:ImXv3pvgL54OvsCQ+ynLFaYRB2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150c663cf7336e5fa9b782c79c14db0a
Files
-
150c663cf7336e5fa9b782c79c14db0a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ