Static task
static1
Behavioral task
behavioral1
Sample
19ba63ddb063c3456b56d938c3507e29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19ba63ddb063c3456b56d938c3507e29.exe
Resource
win10v2004-20231222-en
General
-
Target
19ba63ddb063c3456b56d938c3507e29
-
Size
547KB
-
MD5
19ba63ddb063c3456b56d938c3507e29
-
SHA1
90a04487311c1d655dbdb62267ac9880a580b7c3
-
SHA256
c1bcaeced093d056cd7217eaf7b9d15146d26430a6a5aefca92c1bdee52b163c
-
SHA512
487772a62f87f4b8b2f1d508e0338bff0d1db31b08173e85986266cd03bb1fcd2b07000da9559d8cd25d591cf877c8430fb7567a6d10a011917c0154dd26bcaf
-
SSDEEP
6144:PdR4/G5QsKTSMv7S1h7zybB9+OigKEGHI0b0B2UOnGTSs4kMGf5+U:PdRA+JEohITiREx0b0I9GTSdvWwU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19ba63ddb063c3456b56d938c3507e29
Files
-
19ba63ddb063c3456b56d938c3507e29.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mac Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE