Static task
static1
Behavioral task
behavioral1
Sample
7e15d41cd44cd2856a0b8be9712d420b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e15d41cd44cd2856a0b8be9712d420b.exe
Resource
win10v2004-20231222-en
General
-
Target
7e15d41cd44cd2856a0b8be9712d420b
-
Size
167KB
-
MD5
7e15d41cd44cd2856a0b8be9712d420b
-
SHA1
8d661d04f30c29fc16d65a7be8fbc1858e0214f5
-
SHA256
dda128e3f6514e052ddf3f00259596027b1650b75669e61017cd54086c9085e8
-
SHA512
56482317fa27069bf108c3ff17281499055d8ed0cd8811f35ef2d0a0e6dcb3a4c0d9724678e44c10889c6ff8ba0c039e4d88285b4ea31c2658db47d5aadc455c
-
SSDEEP
3072:xrD7wj1i37f/F+a8lwKW0hmTPcjQIEMP7Rt3rY5xTzEIn:sMrf/ilHphBjQ/MzTrYnzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e15d41cd44cd2856a0b8be9712d420b
Files
-
7e15d41cd44cd2856a0b8be9712d420b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 309B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ