Static task
static1
Behavioral task
behavioral1
Sample
715b58a7d3bce70ad2164e90f0195b21.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
715b58a7d3bce70ad2164e90f0195b21.exe
Resource
win10v2004-20240709-en
General
-
Target
715b58a7d3bce70ad2164e90f0195b21.bin
-
Size
66KB
-
MD5
715b58a7d3bce70ad2164e90f0195b21
-
SHA1
c0c2c61da643c998275b447363df7458ec82ed28
-
SHA256
d6b9ca99d2925985934d5aaafcd194510fcec80c0c83b479fec8c2b1606fadfd
-
SHA512
25d02c7967cf6877412a24e1319f54218fc585bcf0ad6f9c3785bb8ad48cf578a0ec59f2a918b64943245179714555590155c9909bf63e3cb3127f921fb7796e
-
SSDEEP
1536:QjbV2k97cv4GNhsiZgZsUKTzfFMWXjbMWBuYhxDfaG5hiF2:QF1smiy7eXMGmG5hI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 715b58a7d3bce70ad2164e90f0195b21.bin
Files
-
715b58a7d3bce70ad2164e90f0195b21.bin.exe windows:4 windows x86 arch:x86
18babc38a69943796779b5371c404687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
GetDiskFreeSpaceA
InterlockedIncrement
GetProcessVersion
CheckNameLegalDOS8Dot3W
VDMOperationStarted
GetProcessWorkingSetSize
SetCalendarInfoA
CreateMutexA
GetThreadSelectorEntry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE