Static task
static1
Behavioral task
behavioral1
Sample
319f1ee8297e917e8fbf194803c36a1e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
319f1ee8297e917e8fbf194803c36a1e.exe
Resource
win10v2004-20231222-en
General
-
Target
319f1ee8297e917e8fbf194803c36a1e
-
Size
121KB
-
MD5
319f1ee8297e917e8fbf194803c36a1e
-
SHA1
c1bb151795194a39098abdc9cc9c417314f28f1a
-
SHA256
4c05982e7c88d419996f02437caed20eb6ae33c5ed3516828991971faffb6d04
-
SHA512
2096804141706eeffa1fa1fc9b4b8ff6c11f2714077d4788a36f68752f3926f8725ee2a2feaef4ba257c378d598e34dff9a8d1648f8dd259510553febb4b8732
-
SSDEEP
1536:Lu5aNAh7HpOk5dJFtgjVKUQDrvk3I3lXOIOson9zLjhbBJUXCf3A3wB+iyZJBnZT:LJeVpFZFtMVQfkIVctLVbE4v+5XHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319f1ee8297e917e8fbf194803c36a1e
Files
-
319f1ee8297e917e8fbf194803c36a1e.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sections
��z>�9Ԅ Size: - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�-�b�`� Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
M�p�뭷6 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ