Static task
static1
Behavioral task
behavioral1
Sample
419ffbed9b2067c85ba4a82a9c7359b9.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
419ffbed9b2067c85ba4a82a9c7359b9.exe
Resource
win10v2004-20231201-en
General
-
Target
419ffbed9b2067c85ba4a82a9c7359b9
-
Size
1.5MB
-
MD5
419ffbed9b2067c85ba4a82a9c7359b9
-
SHA1
405ec5e062677995ad01a4916a2028dec9376882
-
SHA256
a6569f933f682a0b887c06b1b1d76b2fbd01c0c8724f84645b5bcc1525c60713
-
SHA512
e37d949c68df33efbdbffda6593744022f672454cd012990e5fb9861bc5d18328709d6baf54f3a391698e981b4f909b656032bdd66c66c7af6dfcdedbefa709f
-
SSDEEP
24576:e9dG37Vk0R07Qanm9GYA7CgEYRqJ+j83PG0X1HbttMJOrDVAg6h3Of:lrq0R07QQm4DRO+Wf1Hb0JONAg6hM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 419ffbed9b2067c85ba4a82a9c7359b9
Files
-
419ffbed9b2067c85ba4a82a9c7359b9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ