Static task
static1
Behavioral task
behavioral1
Sample
15c9280f9458de84c4b8534fa91219d4a78d54b90bdd4cab599bff29c4dc99c9.exe
Resource
win7-20240508-en
General
-
Target
15c9280f9458de84c4b8534fa91219d4a78d54b90bdd4cab599bff29c4dc99c9
-
Size
1.9MB
-
MD5
18f684e26b30434930a86699389d73a2
-
SHA1
be27ef9c6bf5107f5dfef23340d02f50382d09f8
-
SHA256
15c9280f9458de84c4b8534fa91219d4a78d54b90bdd4cab599bff29c4dc99c9
-
SHA512
6c7b61550617a84ca9535b08d810039b283d89108aa9ab478c0bb45c250a80f80d2635de87f892c0e7b3c82976c8f7c354d532f4aca861721e8b884720b3820b
-
SSDEEP
49152:lSkD5PPAxuoPif8SRTZITZpcIhiwS1BPwQ:lSeQxuYiUSETZpcIdSoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 15c9280f9458de84c4b8534fa91219d4a78d54b90bdd4cab599bff29c4dc99c9
Files
-
15c9280f9458de84c4b8534fa91219d4a78d54b90bdd4cab599bff29c4dc99c9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
smokbhnj Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
perrkrcn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE