Static task
static1
Behavioral task
behavioral1
Sample
190ca87e73fde12352d15aa1707dc029.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
190ca87e73fde12352d15aa1707dc029.exe
Resource
win10v2004-20231222-en
General
-
Target
190ca87e73fde12352d15aa1707dc029
-
Size
423KB
-
MD5
190ca87e73fde12352d15aa1707dc029
-
SHA1
6815803c3838bb724144a8034d777e2bf39fe8a6
-
SHA256
30ac73797df43589df55a29026f67807e6ed5333beb23da1d3008d472b8871e6
-
SHA512
489f0b1a27dcee3caf52d84a2d32f6782e4007e933058a77b39255280cb71ef775efbe9149528947a683f75fbf6d76700035f6c1ad29323325eaae1b05e66231
-
SSDEEP
1536:alChYBR/BSc7oHSXn84caCH7Cn8byyR/lU4b:aohYBR/B37dXnDcar8+Y/lbb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 190ca87e73fde12352d15aa1707dc029
Files
-
190ca87e73fde12352d15aa1707dc029.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ