Static task
static1
Behavioral task
behavioral1
Sample
189616557cd637c997be0d999b65f7e2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
189616557cd637c997be0d999b65f7e2.exe
Resource
win10v2004-20231215-en
General
-
Target
189616557cd637c997be0d999b65f7e2
-
Size
797KB
-
MD5
189616557cd637c997be0d999b65f7e2
-
SHA1
2d7bdbc0594bb199c7f629819a75064fad572fea
-
SHA256
bcb0eaccdf6398fb362f5bcd2e9bca7ec5b3f5d0e48aaa30905c23ea90e595e9
-
SHA512
80480f61ddab0f293036d28b04b9095f462ed2166ae484903d5f89a2924415420db3d12da65faaef783c83bec348bfc84d8c999757dcc81a78006419e9d42a26
-
SSDEEP
12288:wbb9G/OVkDo3dMA1q1CgtQisSqikdnVrECaBwQ2tb5JLrnyl8:wbb9G/OVkDSMA1rgtQisS7Yn61B+5vM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189616557cd637c997be0d999b65f7e2
Files
-
189616557cd637c997be0d999b65f7e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ