Static task
static1
Behavioral task
behavioral1
Sample
203192d1e37fb8e02391e0542d6684f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
203192d1e37fb8e02391e0542d6684f7.exe
Resource
win10v2004-20231215-en
General
-
Target
203192d1e37fb8e02391e0542d6684f7
-
Size
237KB
-
MD5
203192d1e37fb8e02391e0542d6684f7
-
SHA1
9ce116b260158f00c6d2ade07f99a29ff696b00b
-
SHA256
06be0a8d92b5b8edc41116be67fa8652d49481b3c7e1c3bfe864a3d782a73fab
-
SHA512
0bd08fdca9f88f9fc746e1c7db9b7f573af6ceac309a217dc3756db5025569a036f0b430f690b2baa419aa77ebc3ee819fc3a75ca7a2a6700c99de18b2a5539d
-
SSDEEP
6144:V8kzYXLv1RXhSqsXE9iiKj5eCTdJhbR2NNsDBa:VtYXLDhsxeCTdTbke4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 203192d1e37fb8e02391e0542d6684f7
Files
-
203192d1e37fb8e02391e0542d6684f7.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Much Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adecu Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.laor Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cud Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ