Static task
static1
Behavioral task
behavioral1
Sample
15c3f8043df5d39a2b71c13cf9fe39ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15c3f8043df5d39a2b71c13cf9fe39ca.exe
Resource
win10v2004-20231215-en
General
-
Target
15c3f8043df5d39a2b71c13cf9fe39ca
-
Size
75KB
-
MD5
15c3f8043df5d39a2b71c13cf9fe39ca
-
SHA1
0debd30ab0a040bc17efd68b587db2d7ea2d4335
-
SHA256
91b5a2eb609ac76c21be58523f2d2f3766e6c599e0a2d81d673fb847f699fe2f
-
SHA512
869985228131302dbea7b9b323c909f4b6c95447e3abf08b5d9937b394d8bde8001e0e1a09501dc1f81fc5b20c57cfcf1cd05f13e0111d157859f6c1bf5a8927
-
SSDEEP
1536:SEXuxXOfVgi1jVs640cvLeB1OTP4IsiAeglJMOpK6y2r:Sl1Ot5pD40cSBQTPaislzKr2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c3f8043df5d39a2b71c13cf9fe39ca
Files
-
15c3f8043df5d39a2b71c13cf9fe39ca.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
djvg3li0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6p5.qkop Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fh0agc58 Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE