Static task
static1
Behavioral task
behavioral1
Sample
194709ce168abd3d988cf55e8a479943.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
194709ce168abd3d988cf55e8a479943.exe
Resource
win10v2004-20231215-en
General
-
Target
194709ce168abd3d988cf55e8a479943
-
Size
58KB
-
MD5
194709ce168abd3d988cf55e8a479943
-
SHA1
60a4ae2d897e0da66642bc9e810e4fc96c617750
-
SHA256
f313a2e3fad3f72ada5c905791d27ceacb21caeac8c9d04173588c53ad589d6c
-
SHA512
9faa1ea10cbd2471f0009187134d16bbac0c7dc08081b7b49ca77915c8eadf0582c208c20e7c5efd7b18f73afe81c716f63b674cca2c792ce74fcc3e28a60f23
-
SSDEEP
768:fevFI1m0on6HGavZUPQffoaFNnioNQpMGZXlFPVrqX9zm3yr53nm5GMuMNCNaA7I:itV6HGavzgamfRK9zm30dnvfM2a+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 194709ce168abd3d988cf55e8a479943
Files
-
194709ce168abd3d988cf55e8a479943.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ