Static task
static1
Behavioral task
behavioral1
Sample
1913336d137a60b3c8537cf8573efa32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1913336d137a60b3c8537cf8573efa32.exe
Resource
win10v2004-20231222-en
General
-
Target
1913336d137a60b3c8537cf8573efa32
-
Size
860KB
-
MD5
1913336d137a60b3c8537cf8573efa32
-
SHA1
743ed48451b5b990ce7090236f14889b07be9129
-
SHA256
1c516fc35a42ca188a2af06016180fd61483e192d156e5f689b6472db20cb9c4
-
SHA512
55d1b2e754dce2e51f1d3253a2aa937e5f5aaee6d3828eff17edd6a222704bf9e9c77df34f18454920c5fd72ec6c9fed097f9df25d65596c1d9dd1b65aa63176
-
SSDEEP
6144:ATV4t2rpOA5MIgxfESGV4TV4t2rpOA5MIgxfESYCnqJQYU68wee3pxyN90vE4K5U:iE2r3gxQUE2r3gx2Cq/r8Sy90c5q8gT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1913336d137a60b3c8537cf8573efa32
Files
-
1913336d137a60b3c8537cf8573efa32.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 675KB - Virtual size: 675KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ