Static task
static1
Behavioral task
behavioral1
Sample
15334f94b4f5fa2dfa90e46a49e9b0a1.exe
Resource
win7-20240708-en
General
-
Target
15334f94b4f5fa2dfa90e46a49e9b0a1.exe
-
Size
4.3MB
-
MD5
15334f94b4f5fa2dfa90e46a49e9b0a1
-
SHA1
892e5ca39368157587400114133896013266c1c9
-
SHA256
935723666cc1a0c30276875e3ce3fbc708b26a507b4f6419bf454d739b1c89a5
-
SHA512
efa63b3170756f825f0f3f4f9de52952f0bdd23f0612920c688b66f31395608da3b441dda8f9703c72e825506578dc480ad2deedf240d9669a9627cf545c1c45
-
SSDEEP
98304:GvwCvmAaJjy8tiAyAtNSY9KspNg4GkM768Ld9iBu:GYwmAfWlyAj59pBq6QW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15334f94b4f5fa2dfa90e46a49e9b0a1.exe
Files
-
15334f94b4f5fa2dfa90e46a49e9b0a1.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cpgjsoui Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdbvstgt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE