Static task
static1
Behavioral task
behavioral1
Sample
c15504c9628dbf156551eb135a5dd719.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c15504c9628dbf156551eb135a5dd719.exe
Resource
win10v2004-20240226-en
General
-
Target
c15504c9628dbf156551eb135a5dd719
-
Size
76KB
-
MD5
c15504c9628dbf156551eb135a5dd719
-
SHA1
ca042f39ce3df49b09fe0aa0255db4ab44e10deb
-
SHA256
47d8093a7a5e4a72b1eeb594bb0ebd42ff21fff1741f6a045c687650c00db447
-
SHA512
73c9bf8ee049fe9156b09dad26a7aee89790016ad4f5e7418d41b2d37ad3c35b5b2be5a69b80ad37054e93c8fc538ec69a0690d7d2242249912eb91a5a16c12f
-
SSDEEP
1536:58YJoqi/Otc9eNolNa7Gis75a2TsiA/pjVrs2ryrd1vUQuq6:58YJY/ycQaa7GlZTsL/Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15504c9628dbf156551eb135a5dd719
Files
-
c15504c9628dbf156551eb135a5dd719.exe windows:4 windows x86 arch:x86
bccdd1ddbc31210361d45b40d1d92061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExA
QueryMemoryResourceNotification
HeapAlloc
BaseUpdateAppcompatCache
LeaveCriticalSection
GetStringTypeA
LZRead
GetSystemTimeAsFileTime
GetAtomNameA
GetNamedPipeInfo
BaseCleanupAppcompatCacheSupport
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE