Static task
static1
Behavioral task
behavioral1
Sample
19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd.exe
Resource
win10v2004-20231020-en
General
-
Target
19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd
-
Size
871KB
-
MD5
617b629a69afe4f471c5003f0ce5207e
-
SHA1
15c8bae8a3e86b0981e39305b932f49a0bf54bb6
-
SHA256
19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd
-
SHA512
0be5ac582bac6690452cb3e17465dff427559b2153695dca2f1d412f1469b966bc37f7d3c5655f7f35177c8a26670d84375711841d96d3ea140b2d2a33c661b8
-
SSDEEP
12288:zeGvvDq2xSzDoi1hL5cMnQO0nvD97V9IGXIX9KzMOP8deP8KCslZOaHr60Kh27Uh:xO5e/dkQ3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd
Files
-
19a608552627d213e3f9d988c0a0926b4aadea1170e723103ea08d969c3d40fd.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 856KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ