Static task
static1
Behavioral task
behavioral1
Sample
189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25.exe
Resource
win10v2004-20231023-en
General
-
Target
189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25
-
Size
162KB
-
MD5
ad673b0de24d294b6070ca56eaa8356c
-
SHA1
e87dbc3c610fe2c23fd2a5263c77564909b5aae5
-
SHA256
99ca4de40e3c86db257170caa615b3cd3f155ba4d13faf0751383ab1c0541042
-
SHA512
14976c7994e6bd24cb3794fdaab8f4d53a6826e2d33e4b6bf3c6d45d4b7283f7343bf227fd7efcddaf6af41ec61a60fe6355e953856c366528aad6822401c48d
-
SSDEEP
3072:HIUGfbqRY8w9QIA1e4mHdZ8r+c2yj5a8g6X92VcISW:HIUGfGC5QXfmHgrzj5a8g6X9icISW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25
Files
-
189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25.zip
-
189597859f74a7db84a4bc3d49b4464e4023a6df1c6c28b948239401f9291c25.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 346KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE