Static task
static1
Behavioral task
behavioral1
Sample
158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd.exe
Resource
win10v2004-20231215-en
General
-
Target
158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd
-
Size
639KB
-
MD5
9300c19a497c2997f9c1607cfa9333f3
-
SHA1
463e441de78fd6fb0d7f51f547020c1267895a1f
-
SHA256
158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd
-
SHA512
32ea33f6787c3e85f456d23d4f8b3cd5a6d075a42112810bef372cde3df33679fe81711deb1b0797ea8b4ef57fee6c2b47fa92f24e806387145fa4980aaed0b1
-
SSDEEP
12288:zxqQaueH5qn9N4/xk7Z83a08RdTbK6XSZKFVsrB3OUyWUCI8r5spk/:zxeq9N4/698K076XSmsFOUvUCIKi+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd
Files
-
158900b745c256a090351228530873b4d3835d79a148927de1415db6965d23dd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 631KB - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ