Static task
static1
Behavioral task
behavioral1
Sample
198094d9d2e8f43f848cbec4783e13bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
198094d9d2e8f43f848cbec4783e13bb.exe
Resource
win10v2004-20231215-en
General
-
Target
198094d9d2e8f43f848cbec4783e13bb
-
Size
471KB
-
MD5
198094d9d2e8f43f848cbec4783e13bb
-
SHA1
1b6f22369a00d98aee8f171cc91fb97494ed7c9a
-
SHA256
7af5955a5c2fcdd76911beaaf19c68ed0c2b71f286a78ac0099d27096473f490
-
SHA512
280fb670d96ac313b41b3dbf8bd38e6cb254bf838b6de58348c37c35c74858585de6c5d58bfbc0ca8ab8d27cb35fe4a4c3c732126a122183d8c49e3812693c30
-
SSDEEP
12288:BRV4IM46MzJf5ytc27q4iuAtUVO8us2q0/Bbbg4u3:WcBNGUuAtyO8ul5/hb5u3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198094d9d2e8f43f848cbec4783e13bb
Files
-
198094d9d2e8f43f848cbec4783e13bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE