Static task
static1
Behavioral task
behavioral1
Sample
7157adfca1af24a1b1fa0982dee1cc8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7157adfca1af24a1b1fa0982dee1cc8b.exe
Resource
win10v2004-20231215-en
General
-
Target
7157adfca1af24a1b1fa0982dee1cc8b
-
Size
1.2MB
-
MD5
7157adfca1af24a1b1fa0982dee1cc8b
-
SHA1
76b55709c2fa43e295ba6687c5ab7fd0f1dc58a4
-
SHA256
583713ca2e498d955b877ea9c40efec6d258c6ce620dc31db96981ed7d561602
-
SHA512
a12de39a89c2b1e30dc3aa5b28be390b16c97f681ae1c8b7d5a713af267aad3261cdb4d048326572f5e70cb3171e213449ca5af4981f2b9493196c6163bde2bc
-
SSDEEP
12288:nnUGTXB9iWper1f6LnDyXzmUy1pzmUyy:nvjB8y01MyDmUImUyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7157adfca1af24a1b1fa0982dee1cc8b
Files
-
7157adfca1af24a1b1fa0982dee1cc8b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NOTRING Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hostnsz Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
valldes Size: 669KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lamer Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE