Static task
static1
Behavioral task
behavioral1
Sample
119b4d8ca85febd9de8594374d5faa04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
119b4d8ca85febd9de8594374d5faa04.exe
Resource
win10v2004-20231215-en
General
-
Target
119b4d8ca85febd9de8594374d5faa04
-
Size
183KB
-
MD5
119b4d8ca85febd9de8594374d5faa04
-
SHA1
4db4aa240d3a7087c2d3c849c99d6cfc1b0c1dac
-
SHA256
cb7a4fe8ce4e17436f11ecf582029b94f9a8ac1138e0cf38dba4071ff81a943e
-
SHA512
789b1a68367c8853a68d8a6d1e3a420713641d9be2dad29393b7261ea3387cdbf55f207c62a154a1f51184b9c6f1655c42d3bb468d928221b0889d30090c1a3b
-
SSDEEP
3072:o3GCZi+u93+FPNr9hoOVGToadTutN7ubNVFywb9Ve4kZJcMKQv+C25MOLdUr9hoO:Fv8o/ToUatJubNawb9VOExRCiMOEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119b4d8ca85febd9de8594374d5faa04
Files
-
119b4d8ca85febd9de8594374d5faa04.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE