Static task
static1
Behavioral task
behavioral1
Sample
015f705d98f47d9a32283e028ba50fb0dba8f8eb344fe871c8bed81027cf1113.exe
Resource
win10v2004-20240419-en
General
-
Target
015f705d98f47d9a32283e028ba50fb0dba8f8eb344fe871c8bed81027cf1113
-
Size
2.3MB
-
MD5
0853e3b9bf6a3b3b3007987f90a23d0f
-
SHA1
d36beadddf1ad71da2801868869ad2d561c69147
-
SHA256
015f705d98f47d9a32283e028ba50fb0dba8f8eb344fe871c8bed81027cf1113
-
SHA512
a1425cc7875f041da8362357acc580067258008f8456b3788348aa25b114f6f618f7383db0ca84886ee75f6dcd0dea8398f0891615c4728bfb40e6848e061ad4
-
SSDEEP
49152:VGY5918NqwTEgTcQT/lnyStMt+NP2g28gSmXFH4b3XYGXx1/J:KhTP7lnySysB5gSMFev/J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015f705d98f47d9a32283e028ba50fb0dba8f8eb344fe871c8bed81027cf1113
Files
-
015f705d98f47d9a32283e028ba50fb0dba8f8eb344fe871c8bed81027cf1113.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lgdxykfz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qnmwqwfp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE