Static task
static1
Behavioral task
behavioral1
Sample
15b509797452669ab6fd27dcce119626.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15b509797452669ab6fd27dcce119626.exe
Resource
win10v2004-20231222-en
General
-
Target
15b509797452669ab6fd27dcce119626.exe
-
Size
21KB
-
MD5
15b509797452669ab6fd27dcce119626
-
SHA1
45f74402cc90e6a6438532970c6c9080858d3206
-
SHA256
a925c17ffc09016877b8211c1650cfae5c72dce2d1c7cc3ecde627348666664d
-
SHA512
96bd98fcd6df2aee6651e7e5113962a052d267ff0412de32ee0e81de772e6d432c7a9fb2fb92e88b0afbaeb795808e7780fd4233166499ca191c985fa73eafea
-
SSDEEP
384:+STSJQd275QKJ62lL8/0g5MnN1/+kDkOtTOc5JQhfmSj65doAsSVqxMaxRlMQ:+pwKJXlXnN1HtTOc/OmS+eRSVqxMaxRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b509797452669ab6fd27dcce119626.exe
Files
-
15b509797452669ab6fd27dcce119626.exe.exe windows:4 windows x86 arch:x86
75ddfc3d6876d05872fabe6c8efb3625
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ContinueDebugEvent
DosDateTimeToFileTime
ExitProcess
GetConsoleTitleA
GetStringTypeW
GetWriteWatch
HeapValidate
IsValidCodePage
LocalFree
TlsAlloc
advapi32
AdjustTokenGroups
ConvertSecurityDescriptorToAccessNamedA
CryptEnumProviderTypesW
CryptEnumProvidersA
CryptHashSessionKey
CryptSetProviderExW
GetEffectiveRightsFromAclA
GetMultipleTrusteeOperationW
GetSecurityDescriptorGroup
OpenSCManagerW
SetEntriesInAuditListA
user32
ChangeDisplaySettingsExA
ClipCursor
DrawStateW
FindWindowExA
GetMessageTime
GetTopWindow
IMPGetIMEA
ScreenToClient
ToUnicode
gdi32
CreateBitmapIndirect
CreateCompatibleBitmap
CreateDCA
EnumFontFamiliesW
EqualRgn
GetCharWidth32A
GetLogColorSpaceA
GetMetaFileBitsEx
GetOutlineTextMetricsA
PlayEnhMetaFile
PolyBezierTo
SetBrushOrgEx
StrokePath
Sections
.text Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ