Static task
static1
Behavioral task
behavioral1
Sample
193d25e6dd7f470987b2aa664b25efe4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
193d25e6dd7f470987b2aa664b25efe4.exe
Resource
win10v2004-20231222-en
General
-
Target
193d25e6dd7f470987b2aa664b25efe4
-
Size
329KB
-
MD5
193d25e6dd7f470987b2aa664b25efe4
-
SHA1
2e53cd3858d664a323cb51107abc42e78bdcb2ff
-
SHA256
160aa3977c4e6a157cd87c982ce969ff21bd5a873104e4242a636eefa674c713
-
SHA512
fc2383c1f9ee5ae7c6d1ceffe6eb68e7c1388720015cd8aac3976e527993155ce1620b35e8cc0d905567074f850e9f28c0ad56c8691415c010ece6d39dfb05a1
-
SSDEEP
6144:1Hy7CT7PWMngJ0aXZp0Crqe/sd5A9vYX45q9sbKT6Z2ZDOlml:By76RgJdZp0C2X5A9vYX45a76Zq4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 193d25e6dd7f470987b2aa664b25efe4
Files
-
193d25e6dd7f470987b2aa664b25efe4.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
dzɫԼ�� Size: 255KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzɫԼ�� Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzɫԼ�� Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dzɫԼ�� Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ