Static task
static1
Behavioral task
behavioral1
Sample
196149.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
196149.exe
Resource
win10v2004-20230220-en
General
-
Target
196149.exe
-
Size
621KB
-
MD5
c41273e60dd5a258fe6a6e9303601b7f
-
SHA1
9de4f7c2f99a3204e6ef6c7c1019d80018847570
-
SHA256
196e2b0922c9d556b8ee5ebb7c70acd7ea3452086cdbd8dfdf4ab02df59d3149
-
SHA512
f2e40d7834cc01317cfabde4c759353cb93f822624a5090e743bd9108d1619fbf08bf019b282315d4fda0a0b588557a5e1fb262e6398d2bae774395e130e2872
-
SSDEEP
12288:vDtzLwrTDN+SSHrVMstfTa9/9nS2+01wioLUNOsvCGh/9+Vacw+hTBW3:6zoVpfTa91vwioLKOsvCgte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196149.exe
Files
-
196149.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ