Static task
static1
Behavioral task
behavioral1
Sample
196f1fe4619166d3dc9edb87554a14d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
196f1fe4619166d3dc9edb87554a14d6.exe
Resource
win10v2004-20231215-en
General
-
Target
196f1fe4619166d3dc9edb87554a14d6
-
Size
28.6MB
-
MD5
196f1fe4619166d3dc9edb87554a14d6
-
SHA1
af800e91ddc70448e4f43002fa4b0c5b2704f3c2
-
SHA256
6fb0aafa46aa8e5e28fdbc855794adb7b8fc2c66a3bd26db08c5e85ac009e643
-
SHA512
a6110be08b9ccaccba55d40b1959ea4cafb6df4554cbd78e9d87c90402ed475fd7da05b4f5f95bda5a5bb5b997fd8db7803d1dbd8a011d0a1d9de093a2ba6fc8
-
SSDEEP
393216:UWsn7fEJN6Tu4FfaRW4SdS1IdvCA9DG8EjNTFd0CEzpV67niH6Fw1OwBT4i8s:XpsbPCAVXQRsrpVGiaOAwl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196f1fe4619166d3dc9edb87554a14d6
Files
-
196f1fe4619166d3dc9edb87554a14d6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28.6MB - Virtual size: 28.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ