Static task
static1
Behavioral task
behavioral1
Sample
1219549d61f63391809a70d8cc88ea3a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1219549d61f63391809a70d8cc88ea3a.exe
Resource
win10v2004-20231215-en
General
-
Target
1219549d61f63391809a70d8cc88ea3a
-
Size
385KB
-
MD5
1219549d61f63391809a70d8cc88ea3a
-
SHA1
b0b0da9fbe93c64df019c976a53dfca5161a81df
-
SHA256
2c7aaf0ee9ddec471517f903bf54570ea78ce60774988c2e1bf3627e63f505fa
-
SHA512
8d7ca145f300501902120b6854db41342d8d0dd95dcece7558b6f7f1a75dcbc170744abafa547882032c52e1ce9bd57aa53b45585eafbed6c9c50d43c86235e3
-
SSDEEP
12288:/ZMl9hotG/p6reL3z3GS45wFBekTtiQi9RB:/ZY9hos/pPLzGzwFBePQi9RB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1219549d61f63391809a70d8cc88ea3a
Files
-
1219549d61f63391809a70d8cc88ea3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ