Static task
static1
Behavioral task
behavioral1
Sample
19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370.exe
Resource
win10v2004-20230831-en
General
-
Target
19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370
-
Size
1.8MB
-
MD5
5ff8b6894f90756f29d7813d0bc6e1b6
-
SHA1
d75e627d9ad4d98730ab29319459717c38521832
-
SHA256
19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370
-
SHA512
5031c3d7f22759e11afe9d1913b086a166e751b3924586416cd512eedcecaad90fad26ccbabe0345aadce72c4d8752f9e6dffd2e623bd0081e914e615e2f73e9
-
SSDEEP
24576:ZlbBVxx5TL7WjEfkyUcLDvHdgexq9MjD/l5ePvtDO6tjX6Uh71H3UhP0MPP:fJrWjE5UeDFHSclSvtdtZ76hMMPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370
Files
-
19704c6c957c93e604139484f12e2110bfb3bc1459b58e60f6e65febaae70370.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 148KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.2MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ