Static task
static1
Behavioral task
behavioral1
Sample
199695efcd64bbb0bb5c1114e03c56da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
199695efcd64bbb0bb5c1114e03c56da.exe
Resource
win10v2004-20231215-en
General
-
Target
199695efcd64bbb0bb5c1114e03c56da
-
Size
82KB
-
MD5
199695efcd64bbb0bb5c1114e03c56da
-
SHA1
ce96a92bb8a1a2b390481ef82732f0a4adf2b178
-
SHA256
e828b675b4930cc9dd4416b7dcf44a757415ced0a5d751605618ca80feed6cc7
-
SHA512
877387bec7cca6a704dbd68abc342b4b9ad652e5c2c769b551366aef977e3ccc896e307e20c72062f0452fb0ee5648a99d32f7ffd19cd2a8a5b2aa9d31d717ae
-
SSDEEP
1536:7QSbhkMH7bqmisMM7LyrOk+n3PUC4R/u64CYK765WZEPSWJTD+H6g0:MSyMXqmngCkw3M8VCAXPSgD+Hr0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199695efcd64bbb0bb5c1114e03c56da
Files
-
199695efcd64bbb0bb5c1114e03c56da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ