Static task
static1
Behavioral task
behavioral1
Sample
189a66614efac31cfeaf3c3e542385d7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
189a66614efac31cfeaf3c3e542385d7.exe
Resource
win10v2004-20231215-en
General
-
Target
189a66614efac31cfeaf3c3e542385d7
-
Size
176KB
-
MD5
189a66614efac31cfeaf3c3e542385d7
-
SHA1
3d52aaa60968805939d60ad6e8f7b6976fb22283
-
SHA256
16b3a0442ed646385c254f659776b14e619a55a2b46a11ab75c8a637078d3aea
-
SHA512
0b2d50852ec675e479162d55e419159ee9a5b90f5ac10d7b4e595964a9d653b273634ee2d8acc817dd41602a5871f6c0ebae72aa87e99f3f21ebc6265f003dd8
-
SSDEEP
3072:0ftffjmNZQeOfjR2cVCxk+WI0opiKyD/IOSfS0G9SqKtmxmAPxV/:MVfjmNOeON2cVCxk7ooBo1C8wmAp5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189a66614efac31cfeaf3c3e542385d7
Files
-
189a66614efac31cfeaf3c3e542385d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE