Static task
static1
Behavioral task
behavioral1
Sample
f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5.exe
Resource
win10v2004-20240508-en
General
-
Target
f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5
-
Size
320KB
-
MD5
7c89d59b6bc5e71e0b6e9a75a2d64e3d
-
SHA1
3311a6cac9f9c283c093f6ef4d61654c41bab2bd
-
SHA256
f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5
-
SHA512
bdac66d15e18154f6b6a2b66231ff4ed62915160c12c7e79ae2b681bcbc35c524df8ace0d54d9e432b1bc9954606c55780d4155d8ea87e29bb5bdb7c50e47e6e
-
SSDEEP
6144:aB2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:k2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5
Files
-
f815bf6d98e0025fb195aeaaf2348f43a6057a3211cbae41dc27fea647db5eb5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE