Static task
static1
Behavioral task
behavioral1
Sample
192a1e175879031bf3e3c54646782ebf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
192a1e175879031bf3e3c54646782ebf.exe
Resource
win10v2004-20231215-en
General
-
Target
192a1e175879031bf3e3c54646782ebf
-
Size
184KB
-
MD5
192a1e175879031bf3e3c54646782ebf
-
SHA1
6234fbd5f36a921a354728a10f373cc3f30b5a34
-
SHA256
f2214691c88c54981de698ccd38b8352f1ec3072099cd64aee25179a8b97c4ca
-
SHA512
f38351059d7480ac7b467f93e72edd8eb978a11170ffeb9e981d1710c3e53636b6ac8bce6ba893f0f0d5d826e31fb1bbb9838d43653caed745071f99f0ed7273
-
SSDEEP
1536:OCqlZmQ2sKOh+nqx1sbZDIA1LEFnMquls2iCTKUstzGSI6BQh7GWjHsH88z0ZGS+:p/sP1sf1LEpalFJTzGzGp7FMH8UaOz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192a1e175879031bf3e3c54646782ebf
Files
-
192a1e175879031bf3e3c54646782ebf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE