Static task
static1
Behavioral task
behavioral1
Sample
19c115c533a2d825ff4ebf431dfbb992.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19c115c533a2d825ff4ebf431dfbb992.exe
Resource
win10v2004-20231215-en
General
-
Target
19c115c533a2d825ff4ebf431dfbb992
-
Size
96KB
-
MD5
19c115c533a2d825ff4ebf431dfbb992
-
SHA1
e8f62e81b1bca1a67a8a8ab5bbd8ec8b19a70def
-
SHA256
8f745a01b5fb0b3bd06cb1be3ff1937aae6b829b4e3929fa5ee7022869bc4100
-
SHA512
475ed67f5d8a8bc8adc2984df112b1c92d6cda0e295bbe2a465365146f627274a8a13c231790250aa8155f28fb04ae57fac040444a666e564e9d31bccb9362aa
-
SSDEEP
1536:zaL2kJfW7WpLKu/TRXyPdqcfG0IcQZ5rfOjx6rU7+lCj9xqV6Zjl6lzyNBPy:A2kq0uu/1ChG02lfz47Ao9gcR6lONBPy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c115c533a2d825ff4ebf431dfbb992
Files
-
19c115c533a2d825ff4ebf431dfbb992.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ